./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec1_product23.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 4fc63b2a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec1_product23.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash be08b04703653fc518e8f41dc63d028f83e90f3984633a298492c10e4ad9cfd9 --- Real Ultimate output --- This is Ultimate 0.2.5-dev-4fc63b2 [2024-10-31 22:01:42,136 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-10-31 22:01:42,242 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-10-31 22:01:42,251 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-10-31 22:01:42,252 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-10-31 22:01:42,292 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-10-31 22:01:42,293 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-10-31 22:01:42,294 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-10-31 22:01:42,295 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-10-31 22:01:42,296 INFO L153 SettingsManager]: * Use memory slicer=true [2024-10-31 22:01:42,297 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-10-31 22:01:42,298 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-10-31 22:01:42,299 INFO L153 SettingsManager]: * Use SBE=true [2024-10-31 22:01:42,299 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-10-31 22:01:42,301 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-10-31 22:01:42,302 INFO L153 SettingsManager]: * Use old map elimination=false [2024-10-31 22:01:42,302 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-10-31 22:01:42,303 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-10-31 22:01:42,303 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-10-31 22:01:42,304 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-10-31 22:01:42,308 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-10-31 22:01:42,308 INFO L153 SettingsManager]: * sizeof long=4 [2024-10-31 22:01:42,309 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-10-31 22:01:42,309 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-10-31 22:01:42,309 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-10-31 22:01:42,309 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-10-31 22:01:42,310 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-10-31 22:01:42,310 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-10-31 22:01:42,310 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-10-31 22:01:42,310 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-10-31 22:01:42,311 INFO L153 SettingsManager]: * sizeof long double=12 [2024-10-31 22:01:42,311 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-10-31 22:01:42,311 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-10-31 22:01:42,312 INFO L153 SettingsManager]: * Use constant arrays=true [2024-10-31 22:01:42,314 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-10-31 22:01:42,314 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-10-31 22:01:42,314 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-10-31 22:01:42,315 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-10-31 22:01:42,315 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-10-31 22:01:42,316 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> be08b04703653fc518e8f41dc63d028f83e90f3984633a298492c10e4ad9cfd9 [2024-10-31 22:01:42,631 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-10-31 22:01:42,664 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-10-31 22:01:42,667 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-10-31 22:01:42,669 INFO L270 PluginConnector]: Initializing CDTParser... [2024-10-31 22:01:42,670 INFO L274 PluginConnector]: CDTParser initialized [2024-10-31 22:01:42,672 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/../../sv-benchmarks/c/product-lines/elevator_spec1_product23.cil.c Unable to find full path for "g++" [2024-10-31 22:01:45,036 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-10-31 22:01:45,471 INFO L384 CDTParser]: Found 1 translation units. [2024-10-31 22:01:45,472 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/sv-benchmarks/c/product-lines/elevator_spec1_product23.cil.c [2024-10-31 22:01:45,513 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/data/3b3349822/4e277e2c0b4c4e89b8276e4f47f7860d/FLAGdb6861480 [2024-10-31 22:01:45,536 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/data/3b3349822/4e277e2c0b4c4e89b8276e4f47f7860d [2024-10-31 22:01:45,540 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-10-31 22:01:45,544 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-10-31 22:01:45,546 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-10-31 22:01:45,546 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-10-31 22:01:45,556 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-10-31 22:01:45,557 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 31.10 10:01:45" (1/1) ... [2024-10-31 22:01:45,558 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5d74692f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:45, skipping insertion in model container [2024-10-31 22:01:45,558 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 31.10 10:01:45" (1/1) ... [2024-10-31 22:01:45,669 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-31 22:01:46,453 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-31 22:01:46,502 INFO L200 MainTranslator]: Completed pre-run [2024-10-31 22:01:46,516 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [48] [2024-10-31 22:01:46,518 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [150] [2024-10-31 22:01:46,519 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [516] [2024-10-31 22:01:46,520 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [700] [2024-10-31 22:01:46,521 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [1055] [2024-10-31 22:01:46,521 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [1175] [2024-10-31 22:01:46,522 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [1188] [2024-10-31 22:01:46,522 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1223] [2024-10-31 22:01:46,523 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [2820] [2024-10-31 22:01:46,523 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [2829] [2024-10-31 22:01:46,802 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-31 22:01:46,854 INFO L204 MainTranslator]: Completed translation [2024-10-31 22:01:46,854 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46 WrapperNode [2024-10-31 22:01:46,854 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-10-31 22:01:46,856 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-10-31 22:01:46,856 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-10-31 22:01:46,856 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-10-31 22:01:46,866 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:46,912 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:47,229 INFO L138 Inliner]: procedures = 96, calls = 349, calls flagged for inlining = 202, calls inlined = 421, statements flattened = 13725 [2024-10-31 22:01:47,231 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-10-31 22:01:47,232 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-10-31 22:01:47,232 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-10-31 22:01:47,232 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-10-31 22:01:47,247 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:47,247 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:47,282 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:47,450 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-10-31 22:01:47,451 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:47,451 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:47,572 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:47,661 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:47,685 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:47,774 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:47,824 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-10-31 22:01:47,827 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-10-31 22:01:47,827 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-10-31 22:01:47,827 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-10-31 22:01:47,828 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (1/1) ... [2024-10-31 22:01:47,836 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-31 22:01:47,851 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/z3 [2024-10-31 22:01:47,871 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-31 22:01:47,879 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_85c18741-ca98-419f-9e54-c4963e4faeee/bin/uautomizer-verify-4GaUIPS5ZU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-10-31 22:01:47,914 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-10-31 22:01:47,915 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-10-31 22:01:47,915 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-10-31 22:01:47,917 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-10-31 22:01:47,917 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-10-31 22:01:47,918 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-10-31 22:01:47,918 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-10-31 22:01:47,918 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-10-31 22:01:47,919 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-10-31 22:01:47,919 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-10-31 22:01:47,919 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-10-31 22:01:47,919 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-10-31 22:01:47,919 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-10-31 22:01:47,919 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-10-31 22:01:47,920 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-10-31 22:01:47,920 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-10-31 22:01:47,920 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-10-31 22:01:47,921 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-10-31 22:01:47,921 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-10-31 22:01:47,921 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-10-31 22:01:47,921 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-10-31 22:01:47,922 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-10-31 22:01:47,922 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-10-31 22:01:48,225 INFO L238 CfgBuilder]: Building ICFG [2024-10-31 22:01:48,228 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-10-31 22:01:57,677 INFO L? ?]: Removed 6073 outVars from TransFormulas that were not future-live. [2024-10-31 22:01:57,677 INFO L287 CfgBuilder]: Performing block encoding [2024-10-31 22:01:57,758 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-10-31 22:01:57,759 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-10-31 22:01:57,759 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 31.10 10:01:57 BoogieIcfgContainer [2024-10-31 22:01:57,760 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-10-31 22:01:57,761 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-10-31 22:01:57,761 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-10-31 22:01:57,765 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-10-31 22:01:57,766 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-31 22:01:57,766 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 31.10 10:01:45" (1/3) ... [2024-10-31 22:01:57,767 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@54422db2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 31.10 10:01:57, skipping insertion in model container [2024-10-31 22:01:57,767 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-31 22:01:57,768 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:46" (2/3) ... [2024-10-31 22:01:57,769 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@54422db2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 31.10 10:01:57, skipping insertion in model container [2024-10-31 22:01:57,769 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-31 22:01:57,770 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 31.10 10:01:57" (3/3) ... [2024-10-31 22:01:57,771 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product23.cil.c [2024-10-31 22:01:57,898 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-10-31 22:01:57,898 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-10-31 22:01:57,898 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-10-31 22:01:57,898 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-10-31 22:01:57,899 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-10-31 22:01:57,899 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-10-31 22:01:57,899 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-10-31 22:01:57,899 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-10-31 22:01:57,916 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3631 states, 3630 states have (on average 1.8694214876033057) internal successors, (6786), 3630 states have internal predecessors, (6786), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:01:58,051 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1765 [2024-10-31 22:01:58,051 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:01:58,052 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:01:58,079 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:58,080 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:58,080 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-10-31 22:01:58,091 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3631 states, 3630 states have (on average 1.8694214876033057) internal successors, (6786), 3630 states have internal predecessors, (6786), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:01:58,155 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1765 [2024-10-31 22:01:58,156 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:01:58,156 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:01:58,164 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:58,165 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:58,172 INFO L745 eck$LassoCheckResult]: Stem: 146#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3561#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret52#1, main_~retValue_acc~4#1, main_~tmp~14#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~14#1;assume { :begin_inline_select_helpers } true; 2515#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2246#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 530#valid_product_returnLabel#1true main_#t~ret52#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~14#1 := main_#t~ret52#1;havoc main_#t~ret52#1; 1367#L1042true assume 0 != main_~tmp~14#1;assume { :begin_inline_setup } true; 1192#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 3242#__utac_acc__Specification1_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret45#1, bigMacCall_~tmp~11#1;havoc bigMacCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1872#L1101true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1952#getOrigin_returnLabel#1true bigMacCall_#t~ret45#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11#1 := bigMacCall_#t~ret45#1;havoc bigMacCall_#t~ret45#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1203#L3187true assume 0 == initPersonOnFloor_~floor#1; 421#L3188true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1247#L3295-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1657#L541true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1529#L553-2true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 438#L2979true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1021#L2991-2true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 771#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 339#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret45#1, bigMacCall_~tmp~11#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret42#1, angelinaCall_~tmp~8#1;havoc angelinaCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1737#L1101-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 314#getOrigin_returnLabel#2true angelinaCall_#t~ret42#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~8#1 := angelinaCall_#t~ret42#1;havoc angelinaCall_#t~ret42#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3470#L3187-1true assume 0 == initPersonOnFloor_~floor#1; 3379#L3188-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1563#L3295-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1149#L541-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 3626#L553-5true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 3420#L2979-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1370#L2991-5true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 2585#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 2361#angelinaCall_returnLabel#1true havoc angelinaCall_#t~ret42#1, angelinaCall_~tmp~8#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret46#1, cleanup_#t~ret47#1, cleanup_~i~2#1, cleanup_~tmp~12#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~12#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 2337#L2912true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 1879#isFloorCalling_returnLabel#1true isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 3069#isExecutiveFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret86#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 2286#L2192true assume 0 != stopRequestedAtCurrentFloor_~tmp~25#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2635#getCurrentFloorID_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret87#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret87#1;havoc stopRequestedAtCurrentFloor_#t~ret87#1; 816#L2196true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~24#1; 208#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret102#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 889#L2344true assume !(0 != timeShift_~tmp___9~2#1); 1225#L2435true assume !(1 == ~doorState~0); 593#L2435-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~20#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 3260#L2912-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 2119#isFloorCalling_returnLabel#4true isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 746#isExecutiveFloorCalling_returnLabel#2true stopRequestedInDirection_#t~ret77#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret77#1;havoc stopRequestedInDirection_#t~ret77#1; 296#L2047true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 3480#getCurrentFloorID_returnLabel#4true stopRequestedInDirection_#t~ret78#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret78#1;havoc stopRequestedInDirection_#t~ret78#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~20#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~20#1; 1268#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret109#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret109#1;havoc timeShift_#t~ret109#1; 1319#L2443true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 249#L2104true assume !(1 == ~currentHeading~0); 961#L2114true assume !(0 == ~currentFloorID~0); 1862#L2114-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1540#L2120-1true havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 3506#L2452-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 809#getCurrentFloorID_returnLabel#6true __utac_acc__Specification1_spec__3_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~5#1 := __utac_acc__Specification1_spec__3_#t~ret33#1;havoc __utac_acc__Specification1_spec__3_#t~ret33#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~5#1; 2845#L579true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2#L580true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 555#areDoorsOpen_returnLabel#1true __utac_acc__Specification1_spec__3_#t~ret34#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret34#1;havoc __utac_acc__Specification1_spec__3_#t~ret34#1; 1287#L584true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2642#L639true havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 3327#timeShift_returnLabel#1true havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1347#L845-2true [2024-10-31 22:01:58,178 INFO L747 eck$LassoCheckResult]: Loop: 1347#L845-2true assume !false; 131#L846true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1039#L849true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 2502#isBlocked_returnLabel#1true cleanup_#t~ret46#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret46#1;havoc cleanup_#t~ret46#1; 1167#L853true assume 1 != cleanup_~tmp___0~3#1; 439#L853-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 1504#L2912-65true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 1902#isFloorCalling_returnLabel#66true anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 1277#L1563true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 112#anyStopRequested_returnLabel#1true isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 868#isIdle_returnLabel#1true cleanup_#t~ret47#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~12#1 := cleanup_#t~ret47#1;havoc cleanup_#t~ret47#1; 2116#L865true assume !(0 != cleanup_~tmp~12#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 1650#L2912-70true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 2524#isFloorCalling_returnLabel#71true isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 1133#isExecutiveFloorCalling_returnLabel#4true stopRequestedAtCurrentFloor_#t~ret86#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 2852#L2192-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~25#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 911#getCurrentFloorID_returnLabel#7true stopRequestedAtCurrentFloor_#t~ret87#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret87#1;havoc stopRequestedAtCurrentFloor_#t~ret87#1; 2231#L2196-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~24#1; 1559#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret102#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 3545#L2344-2true assume !(0 != timeShift_~tmp___9~2#1); 583#L2435-3true assume 1 == ~doorState~0;~doorState~0 := 0; 591#L2435-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~20#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 894#L2912-73true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 2509#isFloorCalling_returnLabel#74true isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 89#isExecutiveFloorCalling_returnLabel#5true stopRequestedInDirection_#t~ret77#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret77#1;havoc stopRequestedInDirection_#t~ret77#1; 487#L2047-2true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 3542#getCurrentFloorID_returnLabel#10true stopRequestedInDirection_#t~ret78#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret78#1;havoc stopRequestedInDirection_#t~ret78#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~20#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~20#1; 897#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret109#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret109#1;havoc timeShift_#t~ret109#1; 2004#L2443-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 1261#L2104-3true assume !(1 == ~currentHeading~0); 2309#L2114-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2732#L2114-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1080#L2120-7true havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 2963#L2452-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2690#getCurrentFloorID_returnLabel#12true __utac_acc__Specification1_spec__3_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~5#1 := __utac_acc__Specification1_spec__3_#t~ret33#1;havoc __utac_acc__Specification1_spec__3_#t~ret33#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~5#1; 1928#L579-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2152#L580-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1092#areDoorsOpen_returnLabel#6true __utac_acc__Specification1_spec__3_#t~ret34#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret34#1;havoc __utac_acc__Specification1_spec__3_#t~ret34#1; 107#L584-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1178#L639-1true havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1536#timeShift_returnLabel#2true havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1347#L845-2true [2024-10-31 22:01:58,191 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:01:58,192 INFO L85 PathProgramCache]: Analyzing trace with hash -1792235543, now seen corresponding path program 1 times [2024-10-31 22:01:58,204 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:01:58,205 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [630369588] [2024-10-31 22:01:58,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:01:58,206 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:01:58,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:01:58,786 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:01:58,786 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:01:58,787 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [630369588] [2024-10-31 22:01:58,787 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [630369588] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:01:58,789 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:01:58,789 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:01:58,791 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [918293272] [2024-10-31 22:01:58,793 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:01:58,799 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:01:58,800 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:01:58,800 INFO L85 PathProgramCache]: Analyzing trace with hash 87769064, now seen corresponding path program 1 times [2024-10-31 22:01:58,801 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:01:58,801 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1476717710] [2024-10-31 22:01:58,801 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:01:58,802 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:01:58,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:01:59,091 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:01:59,091 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:01:59,091 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1476717710] [2024-10-31 22:01:59,091 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1476717710] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:01:59,091 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:01:59,092 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-31 22:01:59,092 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1314087112] [2024-10-31 22:01:59,092 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:01:59,093 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:01:59,098 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:01:59,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-10-31 22:01:59,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2024-10-31 22:01:59,150 INFO L87 Difference]: Start difference. First operand has 3631 states, 3630 states have (on average 1.8694214876033057) internal successors, (6786), 3630 states have internal predecessors, (6786), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:02:05,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:02:05,925 INFO L93 Difference]: Finished difference Result 10256 states and 19071 transitions. [2024-10-31 22:02:05,926 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10256 states and 19071 transitions. [2024-10-31 22:02:06,020 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 5125 [2024-10-31 22:02:06,170 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10256 states to 10202 states and 19010 transitions. [2024-10-31 22:02:06,172 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10202 [2024-10-31 22:02:06,188 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10202 [2024-10-31 22:02:06,189 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10202 states and 19010 transitions. [2024-10-31 22:02:06,219 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:02:06,220 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10202 states and 19010 transitions. [2024-10-31 22:02:06,255 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10202 states and 19010 transitions. [2024-10-31 22:02:06,499 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10202 to 10166. [2024-10-31 22:02:06,522 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10166 states, 10166 states have (on average 1.864056659453079) internal successors, (18950), 10165 states have internal predecessors, (18950), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:02:06,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10166 states to 10166 states and 18950 transitions. [2024-10-31 22:02:06,560 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10166 states and 18950 transitions. [2024-10-31 22:02:06,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-10-31 22:02:06,567 INFO L425 stractBuchiCegarLoop]: Abstraction has 10166 states and 18950 transitions. [2024-10-31 22:02:06,568 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-10-31 22:02:06,568 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10166 states and 18950 transitions. [2024-10-31 22:02:06,635 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 5107 [2024-10-31 22:02:06,636 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:02:06,636 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:02:06,644 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:02:06,645 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:02:06,646 INFO L745 eck$LassoCheckResult]: Stem: 14295#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 14296#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret52#1, main_~retValue_acc~4#1, main_~tmp~14#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~14#1;assume { :begin_inline_select_helpers } true; 17376#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 17195#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 15101#valid_product_returnLabel#1 main_#t~ret52#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~14#1 := main_#t~ret52#1;havoc main_#t~ret52#1; 15102#L1042 assume 0 != main_~tmp~14#1;assume { :begin_inline_setup } true; 16124#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 16125#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret45#1, bigMacCall_~tmp~11#1;havoc bigMacCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 16879#L1101 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 15686#getOrigin_returnLabel#1 bigMacCall_#t~ret45#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11#1 := bigMacCall_#t~ret45#1;havoc bigMacCall_#t~ret45#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 16135#L3187 assume 0 == initPersonOnFloor_~floor#1; 14899#L3188 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 13920#L3295-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 16189#L541 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 16524#L553-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 14937#L2979 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 14128#L2991-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 15518#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 14739#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret45#1, bigMacCall_~tmp~11#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret42#1, angelinaCall_~tmp~8#1;havoc angelinaCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 14740#L1101-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 14681#getOrigin_returnLabel#2 angelinaCall_#t~ret42#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~8#1 := angelinaCall_#t~ret42#1;havoc angelinaCall_#t~ret42#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 14682#L3187-1 assume 0 == initPersonOnFloor_~floor#1; 17712#L3188-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 14668#L3295-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 16068#L541-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 14253#L553-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 17720#L2979-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 14045#L2991-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 16344#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 17277#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret42#1, angelinaCall_~tmp~8#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret46#1, cleanup_#t~ret47#1, cleanup_~i~2#1, cleanup_~tmp~12#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~12#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 17266#L2912 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 17267#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 20797#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret86#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 20781#L2192 assume 0 != stopRequestedAtCurrentFloor_~tmp~25#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 20780#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret87#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret87#1;havoc stopRequestedAtCurrentFloor_#t~ret87#1; 20779#L2196 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~24#1; 20772#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret102#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 20769#L2344 assume !(0 != timeShift_~tmp___9~2#1); 20770#L2435 assume !(1 == ~doorState~0); 20974#L2435-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~20#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 17684#L2912-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 17084#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 17085#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret77#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret77#1;havoc stopRequestedInDirection_#t~ret77#1; 22909#L2047 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 22908#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret78#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret78#1;havoc stopRequestedInDirection_#t~ret78#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~20#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~20#1; 22906#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret109#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret109#1;havoc timeShift_#t~ret109#1; 16277#L2443 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 14542#L2104 assume !(1 == ~currentHeading~0); 14543#L2114 assume !(0 == ~currentFloorID~0); 15762#L2114-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 16535#L2120-1 havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 16221#L2452-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 18322#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~5#1 := __utac_acc__Specification1_spec__3_#t~ret33#1;havoc __utac_acc__Specification1_spec__3_#t~ret33#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~5#1; 18319#L579 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 18317#L580 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 18318#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret34#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret34#1;havoc __utac_acc__Specification1_spec__3_#t~ret34#1; 18300#L584 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 18286#L639 havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 18283#timeShift_returnLabel#1 havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 18282#L845-2 [2024-10-31 22:02:06,647 INFO L747 eck$LassoCheckResult]: Loop: 18282#L845-2 assume !false; 18245#L846 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 18242#L849 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 18240#isBlocked_returnLabel#1 cleanup_#t~ret46#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret46#1;havoc cleanup_#t~ret46#1; 18140#L853 assume 1 != cleanup_~tmp___0~3#1; 18098#L853-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 18094#L2912-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 18039#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 17994#L1563 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 17982#anyStopRequested_returnLabel#1 isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 17977#isIdle_returnLabel#1 cleanup_#t~ret47#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~12#1 := cleanup_#t~ret47#1;havoc cleanup_#t~ret47#1; 17973#L865 assume !(0 != cleanup_~tmp~12#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 17970#L2912-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 17771#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 17967#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret86#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 17965#L2192-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~25#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 17956#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret87#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret87#1;havoc stopRequestedAtCurrentFloor_#t~ret87#1; 17953#L2196-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~24#1; 16561#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret102#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 16562#L2344-2 assume !(0 != timeShift_~tmp___9~2#1); 17745#L2435-3 assume 1 == ~doorState~0;~doorState~0 := 0; 23929#L2435-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~20#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 23928#L2912-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 23927#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 14156#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret77#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret77#1;havoc stopRequestedInDirection_#t~ret77#1; 14157#L2047-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 15033#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret78#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret78#1;havoc stopRequestedInDirection_#t~ret78#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~20#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~20#1; 14482#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret109#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret109#1;havoc timeShift_#t~ret109#1; 15720#L2443-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 16997#L2104-3 assume !(1 == ~currentHeading~0); 21990#L2114-9 assume !(0 == ~currentFloorID~0); 17494#L2114-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 15977#L2120-7 havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 14949#L2452-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 18326#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~5#1 := __utac_acc__Specification1_spec__3_#t~ret33#1;havoc __utac_acc__Specification1_spec__3_#t~ret33#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~5#1; 18325#L579-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 18323#L580-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 18324#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret34#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret34#1;havoc __utac_acc__Specification1_spec__3_#t~ret34#1; 18287#L584-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 18285#L639-1 havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 18284#timeShift_returnLabel#2 havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 18282#L845-2 [2024-10-31 22:02:06,648 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:02:06,649 INFO L85 PathProgramCache]: Analyzing trace with hash -1792235543, now seen corresponding path program 2 times [2024-10-31 22:02:06,649 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:02:06,650 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1107262917] [2024-10-31 22:02:06,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:02:06,650 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:02:06,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:02:06,842 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:02:06,844 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:02:06,845 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1107262917] [2024-10-31 22:02:06,845 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1107262917] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:02:06,845 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:02:06,846 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:02:06,846 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [358641887] [2024-10-31 22:02:06,847 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:02:06,847 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:02:06,849 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:02:06,849 INFO L85 PathProgramCache]: Analyzing trace with hash 788833642, now seen corresponding path program 1 times [2024-10-31 22:02:06,850 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:02:06,851 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [245414067] [2024-10-31 22:02:06,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:02:06,851 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:02:06,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:02:06,913 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:02:06,914 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:02:06,914 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [245414067] [2024-10-31 22:02:06,915 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [245414067] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:02:06,915 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:02:06,916 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:02:06,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [191255874] [2024-10-31 22:02:06,916 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:02:06,917 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:02:06,917 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:02:06,917 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-10-31 22:02:06,918 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-10-31 22:02:06,919 INFO L87 Difference]: Start difference. First operand 10166 states and 18950 transitions. cyclomatic complexity: 8786 Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 3 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:02:07,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:02:07,253 INFO L93 Difference]: Finished difference Result 15305 states and 28487 transitions. [2024-10-31 22:02:07,253 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15305 states and 28487 transitions. [2024-10-31 22:02:07,385 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10186 [2024-10-31 22:02:07,481 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15305 states to 15305 states and 28487 transitions. [2024-10-31 22:02:07,481 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15305 [2024-10-31 22:02:07,502 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15305 [2024-10-31 22:02:07,502 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15305 states and 28487 transitions. [2024-10-31 22:02:07,524 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:02:07,524 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15305 states and 28487 transitions. [2024-10-31 22:02:07,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15305 states and 28487 transitions. [2024-10-31 22:02:08,058 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15305 to 15297. [2024-10-31 22:02:08,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15297 states, 15297 states have (on average 1.8614761064260965) internal successors, (28475), 15296 states have internal predecessors, (28475), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:02:08,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15297 states to 15297 states and 28475 transitions. [2024-10-31 22:02:08,137 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15297 states and 28475 transitions. [2024-10-31 22:02:08,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-10-31 22:02:08,138 INFO L425 stractBuchiCegarLoop]: Abstraction has 15297 states and 28475 transitions. [2024-10-31 22:02:08,139 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-10-31 22:02:08,139 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15297 states and 28475 transitions. [2024-10-31 22:02:08,219 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10178 [2024-10-31 22:02:08,219 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:02:08,219 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:02:08,227 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:02:08,227 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:02:08,228 INFO L745 eck$LassoCheckResult]: Stem: 39772#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 39773#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret52#1, main_~retValue_acc~4#1, main_~tmp~14#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~14#1;assume { :begin_inline_select_helpers } true; 42932#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 42740#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 40584#valid_product_returnLabel#1 main_#t~ret52#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~14#1 := main_#t~ret52#1;havoc main_#t~ret52#1; 40585#L1042 assume 0 != main_~tmp~14#1;assume { :begin_inline_setup } true; 41621#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 41622#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret45#1, bigMacCall_~tmp~11#1;havoc bigMacCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 42404#L1101 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 41174#getOrigin_returnLabel#1 bigMacCall_#t~ret45#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11#1 := bigMacCall_#t~ret45#1;havoc bigMacCall_#t~ret45#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 41637#L3187 assume 0 == initPersonOnFloor_~floor#1; 40380#L3188 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 39398#L3295-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 41691#L541 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 42037#L553-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 40419#L2979 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 39606#L2991-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 41006#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 40220#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret45#1, bigMacCall_~tmp~11#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret42#1, angelinaCall_~tmp~8#1;havoc angelinaCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 40221#L1101-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 40164#getOrigin_returnLabel#2 angelinaCall_#t~ret42#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~8#1 := angelinaCall_#t~ret42#1;havoc angelinaCall_#t~ret42#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 40165#L3187-1 assume 0 == initPersonOnFloor_~floor#1; 43319#L3188-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 40147#L3295-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 41563#L541-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 39730#L553-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 43333#L2979-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 39523#L2991-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 41856#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 42832#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret42#1, angelinaCall_~tmp~8#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret46#1, cleanup_#t~ret47#1, cleanup_~i~2#1, cleanup_~tmp~12#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~12#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 42817#L2912 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 42410#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 42411#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret86#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 42774#L2192 assume 0 != stopRequestedAtCurrentFloor_~tmp~25#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 42775#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret87#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret87#1;havoc stopRequestedAtCurrentFloor_#t~ret87#1; 41081#L2196 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~24#1; 39917#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret102#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 39918#L2344 assume !(0 != timeShift_~tmp___9~2#1); 41202#L2435 assume !(1 == ~doorState~0); 40689#L2435-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~20#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 40690#L2912-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 42620#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 42621#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret77#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret77#1;havoc stopRequestedInDirection_#t~ret77#1; 40123#L2047 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 40124#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret78#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret78#1;havoc stopRequestedInDirection_#t~ret78#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~20#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~20#1; 41718#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret109#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret109#1;havoc timeShift_#t~ret109#1; 41719#L2443 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 41784#L2104 assume !(1 == ~currentHeading~0); 51146#L2114 assume !(0 == ~currentFloorID~0); 41250#L2114-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 47420#L2120-1 havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 47419#L2452-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 47418#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~5#1 := __utac_acc__Specification1_spec__3_#t~ret33#1;havoc __utac_acc__Specification1_spec__3_#t~ret33#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~5#1; 47415#L579 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 47414#L580 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 47413#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret34#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret34#1;havoc __utac_acc__Specification1_spec__3_#t~ret34#1; 47384#L584 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 47379#L639 havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 47376#timeShift_returnLabel#1 havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 47369#L845-2 [2024-10-31 22:02:08,228 INFO L747 eck$LassoCheckResult]: Loop: 47369#L845-2 assume !false; 47362#L846 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 47350#L849 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 47348#isBlocked_returnLabel#1 cleanup_#t~ret46#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret46#1;havoc cleanup_#t~ret46#1; 47341#L853 assume 1 != cleanup_~tmp___0~3#1; 47284#L853-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 47283#L2912-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 47282#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 46387#L1563 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 46378#anyStopRequested_returnLabel#1 isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 46377#isIdle_returnLabel#1 cleanup_#t~ret47#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~12#1 := cleanup_#t~ret47#1;havoc cleanup_#t~ret47#1; 46376#L865 assume !(0 != cleanup_~tmp~12#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 46375#L2912-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 46291#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 46374#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret86#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 46372#L2192-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~25#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 46373#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret87#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret87#1;havoc stopRequestedAtCurrentFloor_#t~ret87#1; 46496#L2196-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~24#1; 46274#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret102#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 46270#L2344-2 assume !(0 != timeShift_~tmp___9~2#1); 46268#L2435-3 assume 1 == ~doorState~0;~doorState~0 := 0; 46263#L2435-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~20#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 46255#L2912-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 46254#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 46249#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret77#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret77#1;havoc stopRequestedInDirection_#t~ret77#1; 45967#L2047-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 45962#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret78#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret78#1;havoc stopRequestedInDirection_#t~ret78#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~20#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~20#1; 45124#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret109#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret109#1;havoc timeShift_#t~ret109#1; 45123#L2443-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 41705#L2104-3 assume !(1 == ~currentHeading~0); 41706#L2114-9 assume !(0 == ~currentFloorID~0); 41727#L2114-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 43069#L2120-7 havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 47490#L2452-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 47466#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~5#1 := __utac_acc__Specification1_spec__3_#t~ret33#1;havoc __utac_acc__Specification1_spec__3_#t~ret33#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~5#1; 47462#L579-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 47428#L580-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 47422#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret34#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret34#1;havoc __utac_acc__Specification1_spec__3_#t~ret34#1; 47393#L584-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 47380#L639-1 havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 47377#timeShift_returnLabel#2 havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 47369#L845-2 [2024-10-31 22:02:08,229 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:02:08,230 INFO L85 PathProgramCache]: Analyzing trace with hash -1792235543, now seen corresponding path program 3 times [2024-10-31 22:02:08,230 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:02:08,230 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1700876970] [2024-10-31 22:02:08,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:02:08,231 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:02:08,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:02:08,345 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:02:08,345 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:02:08,346 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1700876970] [2024-10-31 22:02:08,346 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1700876970] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:02:08,346 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:02:08,346 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:02:08,346 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1356514024] [2024-10-31 22:02:08,346 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:02:08,347 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:02:08,347 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:02:08,347 INFO L85 PathProgramCache]: Analyzing trace with hash 395806632, now seen corresponding path program 1 times [2024-10-31 22:02:08,347 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:02:08,347 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1960295743] [2024-10-31 22:02:08,348 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:02:08,348 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:02:08,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:02:08,426 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:02:08,426 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:02:08,426 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1960295743] [2024-10-31 22:02:08,427 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1960295743] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:02:08,427 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:02:08,427 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-31 22:02:08,427 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1642763392] [2024-10-31 22:02:08,427 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:02:08,428 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:02:08,428 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:02:08,428 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-31 22:02:08,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-31 22:02:08,429 INFO L87 Difference]: Start difference. First operand 15297 states and 28475 transitions. cyclomatic complexity: 13180 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:02:08,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:02:08,882 INFO L93 Difference]: Finished difference Result 22768 states and 42262 transitions. [2024-10-31 22:02:08,882 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22768 states and 42262 transitions. [2024-10-31 22:02:09,000 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 15250 [2024-10-31 22:02:09,329 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22768 states to 22768 states and 42262 transitions. [2024-10-31 22:02:09,330 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22768 [2024-10-31 22:02:09,360 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22768 [2024-10-31 22:02:09,360 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22768 states and 42262 transitions. [2024-10-31 22:02:09,399 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:02:09,399 INFO L218 hiAutomatonCegarLoop]: Abstraction has 22768 states and 42262 transitions. [2024-10-31 22:02:09,446 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22768 states and 42262 transitions. [2024-10-31 22:02:10,055 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22768 to 22768. [2024-10-31 22:02:10,104 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22768 states, 22768 states have (on average 1.856201686577653) internal successors, (42262), 22767 states have internal predecessors, (42262), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:02:10,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22768 states to 22768 states and 42262 transitions. [2024-10-31 22:02:10,176 INFO L240 hiAutomatonCegarLoop]: Abstraction has 22768 states and 42262 transitions. [2024-10-31 22:02:10,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-31 22:02:10,177 INFO L425 stractBuchiCegarLoop]: Abstraction has 22768 states and 42262 transitions. [2024-10-31 22:02:10,177 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-10-31 22:02:10,178 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22768 states and 42262 transitions. [2024-10-31 22:02:10,254 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 15250 [2024-10-31 22:02:10,254 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:02:10,254 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:02:10,261 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:02:10,261 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:02:10,261 INFO L745 eck$LassoCheckResult]: Stem: 77852#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 77853#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret52#1, main_~retValue_acc~4#1, main_~tmp~14#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~14#1;assume { :begin_inline_select_helpers } true; 81099#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 80886#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 78666#valid_product_returnLabel#1 main_#t~ret52#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~14#1 := main_#t~ret52#1;havoc main_#t~ret52#1; 78667#L1042 assume 0 != main_~tmp~14#1;assume { :begin_inline_setup } true; 79711#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 79712#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret45#1, bigMacCall_~tmp~11#1;havoc bigMacCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 80530#L1101 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 79265#getOrigin_returnLabel#1 bigMacCall_#t~ret45#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11#1 := bigMacCall_#t~ret45#1;havoc bigMacCall_#t~ret45#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 79728#L3187 assume 0 == initPersonOnFloor_~floor#1; 78463#L3188 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 77476#L3295-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 79781#L541 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 80138#L553-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 78501#L2979 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 77685#L2991-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 79092#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 78298#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret45#1, bigMacCall_~tmp~11#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret42#1, angelinaCall_~tmp~8#1;havoc angelinaCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 78299#L1101-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 78244#getOrigin_returnLabel#2 angelinaCall_#t~ret42#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~8#1 := angelinaCall_#t~ret42#1;havoc angelinaCall_#t~ret42#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 78245#L3187-1 assume 0 == initPersonOnFloor_~floor#1; 81549#L3188-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 78227#L3295-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 79654#L541-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 77809#L553-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 81567#L2979-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 77601#L2991-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 79951#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 80988#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret42#1, angelinaCall_~tmp~8#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret46#1, cleanup_#t~ret47#1, cleanup_~i~2#1, cleanup_~tmp~12#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~12#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 80971#L2912 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 80536#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 80537#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret86#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 80922#L2192 assume 0 != stopRequestedAtCurrentFloor_~tmp~25#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 80924#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret87#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret87#1;havoc stopRequestedAtCurrentFloor_#t~ret87#1; 79170#L2196 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~24#1; 79171#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret102#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 92793#L2344 assume !(0 != timeShift_~tmp___9~2#1); 92794#L2435 assume !(1 == ~doorState~0); 93878#L2435-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~20#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 94216#L2912-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 94215#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 94210#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret77#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret77#1;havoc stopRequestedInDirection_#t~ret77#1; 91553#L2047 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 91554#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret78#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret78#1;havoc stopRequestedInDirection_#t~ret78#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~20#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~20#1; 91545#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret109#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret109#1;havoc timeShift_#t~ret109#1; 91546#L2443 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 78101#L2104 assume !(1 == ~currentHeading~0); 78102#L2114 assume !(0 == ~currentFloorID~0); 80512#L2114-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 80513#L2120-1 havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 81600#L2452-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 81601#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~5#1 := __utac_acc__Specification1_spec__3_#t~ret33#1;havoc __utac_acc__Specification1_spec__3_#t~ret33#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~5#1; 81303#L579 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 77472#L580 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 77473#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret34#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret34#1;havoc __utac_acc__Specification1_spec__3_#t~ret34#1; 93954#L584 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 77874#L639 havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 94861#timeShift_returnLabel#1 havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 94860#L845-2 [2024-10-31 22:02:10,262 INFO L747 eck$LassoCheckResult]: Loop: 94860#L845-2 assume !false; 77811#L846 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 77812#L849 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 79507#isBlocked_returnLabel#1 cleanup_#t~ret46#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret46#1;havoc cleanup_#t~ret46#1; 79674#L853 assume 1 != cleanup_~tmp___0~3#1; 78502#L853-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 78503#L2912-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 80108#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 79819#L1563 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 77768#anyStopRequested_returnLabel#1 isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 77769#isIdle_returnLabel#1 cleanup_#t~ret47#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~12#1 := cleanup_#t~ret47#1;havoc cleanup_#t~ret47#1; 79267#L865 assume !(0 != cleanup_~tmp~12#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 80278#L2912-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 80279#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 79628#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret86#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 79629#L2192-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~25#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 81305#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret87#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret87#1;havoc stopRequestedAtCurrentFloor_#t~ret87#1; 93876#L2196-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~24#1; 92109#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret102#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_~retValue_acc~24#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 92107#L2344-2 assume !(0 != timeShift_~tmp___9~2#1); 92104#L2435-3 assume !(1 == ~doorState~0); 92105#L2435-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~20#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;havoc isExecutiveFloorCalling_~retValue_acc~27#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 97359#L2912-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 97358#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret139#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~27#1 := isExecutiveFloorCalling_#t~ret139#1;havoc isExecutiveFloorCalling_#t~ret139#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~27#1; 97357#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret77#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret139#1, isExecutiveFloorCalling_~retValue_acc~27#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret77#1;havoc stopRequestedInDirection_#t~ret77#1; 97355#L2047-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 97347#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret78#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret78#1;havoc stopRequestedInDirection_#t~ret78#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~20#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~20#1; 97341#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret109#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~20#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret109#1;havoc timeShift_#t~ret109#1; 97339#L2443-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 97338#L2104-3 assume !(1 == ~currentHeading~0); 80947#L2114-9 assume !(0 == ~currentFloorID~0); 80948#L2114-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 94891#L2120-7 havoc continueInDirection_#t~ret80#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 78194#L2452-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 94890#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~5#1 := __utac_acc__Specification1_spec__3_#t~ret33#1;havoc __utac_acc__Specification1_spec__3_#t~ret33#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~5#1; 94889#L579-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 94875#L580-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 94874#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret34#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret34#1;havoc __utac_acc__Specification1_spec__3_#t~ret34#1; 94864#L584-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 94863#L639-1 havoc __utac_acc__Specification1_spec__3_#t~ret33#1, __utac_acc__Specification1_spec__3_#t~ret34#1, __utac_acc__Specification1_spec__3_#t~ret35#1, __utac_acc__Specification1_spec__3_#t~ret36#1, __utac_acc__Specification1_spec__3_#t~ret37#1, __utac_acc__Specification1_spec__3_#t~ret38#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~5#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~2#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 94862#timeShift_returnLabel#2 havoc timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_~tmp~27#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 94860#L845-2 [2024-10-31 22:02:10,263 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:02:10,263 INFO L85 PathProgramCache]: Analyzing trace with hash -1792235543, now seen corresponding path program 4 times [2024-10-31 22:02:10,263 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:02:10,263 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773031310] [2024-10-31 22:02:10,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:02:10,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:02:10,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:02:10,372 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:02:10,372 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:02:10,372 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773031310] [2024-10-31 22:02:10,372 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773031310] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:02:10,373 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:02:10,373 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:02:10,373 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [649058308] [2024-10-31 22:02:10,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:02:10,374 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:02:10,374 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:02:10,374 INFO L85 PathProgramCache]: Analyzing trace with hash 818508458, now seen corresponding path program 1 times [2024-10-31 22:02:10,375 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:02:10,375 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1877858898] [2024-10-31 22:02:10,375 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:02:10,375 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:02:10,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-31 22:02:10,395 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-31 22:02:10,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-31 22:02:10,448 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-31 22:02:11,730 INFO L204 LassoAnalysis]: Preferences: