./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec9_product09.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 4fc63b2a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec9_product09.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash cc5b9f71a5434758faa1f6f3febe6f12c158e9feff610b938ef9d4658acd21ff --- Real Ultimate output --- This is Ultimate 0.2.5-dev-4fc63b2 [2024-10-31 22:00:23,713 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-10-31 22:00:23,819 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-10-31 22:00:23,842 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-10-31 22:00:23,842 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-10-31 22:00:23,870 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-10-31 22:00:23,871 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-10-31 22:00:23,872 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-10-31 22:00:23,873 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-10-31 22:00:23,873 INFO L153 SettingsManager]: * Use memory slicer=true [2024-10-31 22:00:23,874 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-10-31 22:00:23,875 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-10-31 22:00:23,875 INFO L153 SettingsManager]: * Use SBE=true [2024-10-31 22:00:23,876 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-10-31 22:00:23,876 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-10-31 22:00:23,877 INFO L153 SettingsManager]: * Use old map elimination=false [2024-10-31 22:00:23,877 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-10-31 22:00:23,878 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-10-31 22:00:23,878 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-10-31 22:00:23,879 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-10-31 22:00:23,879 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-10-31 22:00:23,884 INFO L153 SettingsManager]: * sizeof long=4 [2024-10-31 22:00:23,884 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-10-31 22:00:23,885 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-10-31 22:00:23,885 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-10-31 22:00:23,885 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-10-31 22:00:23,886 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-10-31 22:00:23,886 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-10-31 22:00:23,886 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-10-31 22:00:23,887 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-10-31 22:00:23,887 INFO L153 SettingsManager]: * sizeof long double=12 [2024-10-31 22:00:23,889 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-10-31 22:00:23,890 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-10-31 22:00:23,890 INFO L153 SettingsManager]: * Use constant arrays=true [2024-10-31 22:00:23,890 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-10-31 22:00:23,891 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-10-31 22:00:23,891 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-10-31 22:00:23,891 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-10-31 22:00:23,892 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-10-31 22:00:23,892 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> cc5b9f71a5434758faa1f6f3febe6f12c158e9feff610b938ef9d4658acd21ff [2024-10-31 22:00:24,275 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-10-31 22:00:24,314 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-10-31 22:00:24,318 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-10-31 22:00:24,320 INFO L270 PluginConnector]: Initializing CDTParser... [2024-10-31 22:00:24,321 INFO L274 PluginConnector]: CDTParser initialized [2024-10-31 22:00:24,322 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/../../sv-benchmarks/c/product-lines/elevator_spec9_product09.cil.c Unable to find full path for "g++" [2024-10-31 22:00:26,734 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-10-31 22:00:27,154 INFO L384 CDTParser]: Found 1 translation units. [2024-10-31 22:00:27,155 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/sv-benchmarks/c/product-lines/elevator_spec9_product09.cil.c [2024-10-31 22:00:27,187 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/data/cf0abef22/a2b03af00080457c9ce6ee58305decb0/FLAGdd1afd0ae [2024-10-31 22:00:27,325 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/data/cf0abef22/a2b03af00080457c9ce6ee58305decb0 [2024-10-31 22:00:27,331 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-10-31 22:00:27,333 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-10-31 22:00:27,338 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-10-31 22:00:27,338 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-10-31 22:00:27,346 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-10-31 22:00:27,347 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 31.10 10:00:27" (1/1) ... [2024-10-31 22:00:27,348 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@23ab9679 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:27, skipping insertion in model container [2024-10-31 22:00:27,349 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 31.10 10:00:27" (1/1) ... [2024-10-31 22:00:27,434 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-31 22:00:28,179 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-31 22:00:28,196 INFO L200 MainTranslator]: Completed pre-run [2024-10-31 22:00:28,212 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [48] [2024-10-31 22:00:28,214 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [62] [2024-10-31 22:00:28,215 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [730] [2024-10-31 22:00:28,215 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1092] [2024-10-31 22:00:28,215 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [2539] [2024-10-31 22:00:28,216 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification9_spec.i","") [2905] [2024-10-31 22:00:28,216 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [3065] [2024-10-31 22:00:28,216 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [3184] [2024-10-31 22:00:28,216 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [3275] [2024-10-31 22:00:28,217 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [3310] [2024-10-31 22:00:28,357 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-31 22:00:28,400 INFO L204 MainTranslator]: Completed translation [2024-10-31 22:00:28,401 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28 WrapperNode [2024-10-31 22:00:28,401 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-10-31 22:00:28,403 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-10-31 22:00:28,403 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-10-31 22:00:28,403 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-10-31 22:00:28,418 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,462 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,639 INFO L138 Inliner]: procedures = 89, calls = 328, calls flagged for inlining = 181, calls inlined = 251, statements flattened = 8063 [2024-10-31 22:00:28,640 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-10-31 22:00:28,641 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-10-31 22:00:28,641 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-10-31 22:00:28,641 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-10-31 22:00:28,654 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,654 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,679 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,742 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-10-31 22:00:28,743 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,743 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,815 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,929 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,943 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,960 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,986 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-10-31 22:00:28,987 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-10-31 22:00:28,987 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-10-31 22:00:28,987 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-10-31 22:00:28,988 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (1/1) ... [2024-10-31 22:00:28,995 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-31 22:00:29,008 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/z3 [2024-10-31 22:00:29,026 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-31 22:00:29,032 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7044672c-7903-44c4-974f-738481b5797e/bin/uautomizer-verify-4GaUIPS5ZU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-10-31 22:00:29,066 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-10-31 22:00:29,067 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-10-31 22:00:29,067 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-10-31 22:00:29,067 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-10-31 22:00:29,067 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-10-31 22:00:29,067 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-10-31 22:00:29,067 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-10-31 22:00:29,068 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-10-31 22:00:29,068 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-10-31 22:00:29,068 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-10-31 22:00:29,068 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-10-31 22:00:29,068 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-10-31 22:00:29,068 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-10-31 22:00:29,068 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-10-31 22:00:29,068 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-10-31 22:00:29,069 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-10-31 22:00:29,069 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-10-31 22:00:29,069 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-10-31 22:00:29,069 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-10-31 22:00:29,069 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-10-31 22:00:29,069 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-10-31 22:00:29,070 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-10-31 22:00:29,070 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-10-31 22:00:29,373 INFO L238 CfgBuilder]: Building ICFG [2024-10-31 22:00:29,375 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-10-31 22:00:35,689 INFO L? ?]: Removed 3635 outVars from TransFormulas that were not future-live. [2024-10-31 22:00:35,690 INFO L287 CfgBuilder]: Performing block encoding [2024-10-31 22:00:35,754 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-10-31 22:00:35,758 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-10-31 22:00:35,758 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 31.10 10:00:35 BoogieIcfgContainer [2024-10-31 22:00:35,759 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-10-31 22:00:35,760 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-10-31 22:00:35,760 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-10-31 22:00:35,765 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-10-31 22:00:35,766 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-31 22:00:35,766 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 31.10 10:00:27" (1/3) ... [2024-10-31 22:00:35,767 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4bb7f962 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 31.10 10:00:35, skipping insertion in model container [2024-10-31 22:00:35,768 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-31 22:00:35,768 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:00:28" (2/3) ... [2024-10-31 22:00:35,769 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4bb7f962 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 31.10 10:00:35, skipping insertion in model container [2024-10-31 22:00:35,769 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-31 22:00:35,770 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 31.10 10:00:35" (3/3) ... [2024-10-31 22:00:35,772 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec9_product09.cil.c [2024-10-31 22:00:35,887 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-10-31 22:00:35,887 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-10-31 22:00:35,888 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-10-31 22:00:35,888 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-10-31 22:00:35,888 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-10-31 22:00:35,888 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-10-31 22:00:35,888 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-10-31 22:00:35,889 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-10-31 22:00:35,905 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2392 states, 2391 states have (on average 1.8732747804265997) internal successors, (4479), 2391 states have internal predecessors, (4479), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:36,029 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1177 [2024-10-31 22:00:36,029 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:36,029 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:36,049 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:36,049 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:36,050 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-10-31 22:00:36,056 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2392 states, 2391 states have (on average 1.8732747804265997) internal successors, (4479), 2391 states have internal predecessors, (4479), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:36,088 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1177 [2024-10-31 22:00:36,088 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:36,088 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:36,093 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:36,093 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:36,103 INFO L745 eck$LassoCheckResult]: Stem: 164#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2277#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 897#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 549#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 683#valid_product_returnLabel#1true main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1468#L1079true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1530#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1729#__utac_acc__Specification9_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 2112#L3110true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 181#getOrigin_returnLabel#1true bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1803#L423true assume 0 == initPersonOnFloor_~floor#1; 557#L424true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 297#L531-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1002#L215true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 38#L227-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 974#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 417#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 905#L152true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 81#isFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 1852#L1934true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 262#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 1115#L2083true assume !(0 != timeShift_~tmp___9~2#1); 1408#L2174true assume !(1 == ~doorState~0); 2361#L2174-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1672#L1525true assume !(1 == stopRequestedInDirection_~dir#1); 1426#L1694true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1657#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 728#L2182true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 1247#L1901true assume !(1 == ~currentHeading~0); 616#L1911true assume !(0 == ~currentFloorID~0); 1574#L1911-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2065#L1917-1true havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1250#L2191-2true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1042#getCurrentFloorID_returnLabel#1true __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 2062#L1381-6true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 257#isEmpty_returnLabel#7true __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 941#L2964true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1661#L2974-1true havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1988#timeShift_returnLabel#1true havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1272#L879-2true [2024-10-31 22:00:36,104 INFO L747 eck$LassoCheckResult]: Loop: 1272#L879-2true assume !false; 473#L880true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1051#L883true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 887#isBlocked_returnLabel#1true cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1918#L887true assume 1 != cleanup_~tmp___0~0#1; 1043#L887-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 173#L152-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1419#isFloorCalling_returnLabel#22true anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 1620#L1429true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 130#anyStopRequested_returnLabel#1true isIdle_#t~ret24#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 1099#isIdle_returnLabel#1true cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1059#L899true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1735#L152-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1108#isFloorCalling_returnLabel#27true stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 175#L1934-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 2054#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 2224#L2083-2true assume !(0 != timeShift_~tmp___9~2#1); 1855#L2174-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1706#L2174-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 360#L1525-2true assume !(1 == stopRequestedInDirection_~dir#1); 1893#L1694-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1146#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1147#L2182-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 1423#L1901-3true assume !(1 == ~currentHeading~0); 1648#L1911-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1265#L1911-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 305#L1917-7true havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1715#L2191-5true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1332#getCurrentFloorID_returnLabel#2true __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 422#L1381-13true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 986#isEmpty_returnLabel#14true __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 1232#L2964-2true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1378#L2974-3true havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2021#timeShift_returnLabel#2true havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1272#L879-2true [2024-10-31 22:00:36,117 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:36,121 INFO L85 PathProgramCache]: Analyzing trace with hash 476793912, now seen corresponding path program 1 times [2024-10-31 22:00:36,135 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:36,136 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1454179689] [2024-10-31 22:00:36,136 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:36,137 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:36,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:36,617 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:36,618 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:36,618 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1454179689] [2024-10-31 22:00:36,619 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1454179689] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:36,619 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:36,619 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:36,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1398503570] [2024-10-31 22:00:36,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:36,627 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:00:36,629 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:36,629 INFO L85 PathProgramCache]: Analyzing trace with hash -1997008952, now seen corresponding path program 1 times [2024-10-31 22:00:36,630 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:36,630 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326108359] [2024-10-31 22:00:36,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:36,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:36,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:36,761 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:36,762 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:36,762 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326108359] [2024-10-31 22:00:36,762 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326108359] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:36,762 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:36,762 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-10-31 22:00:36,763 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2096176973] [2024-10-31 22:00:36,763 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:36,764 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:00:36,766 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:00:36,805 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-10-31 22:00:36,805 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-10-31 22:00:36,814 INFO L87 Difference]: Start difference. First operand has 2392 states, 2391 states have (on average 1.8732747804265997) internal successors, (4479), 2391 states have internal predecessors, (4479), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 6 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:37,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:00:37,153 INFO L93 Difference]: Finished difference Result 2386 states and 4465 transitions. [2024-10-31 22:00:37,154 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 2386 states and 4465 transitions. [2024-10-31 22:00:37,173 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1179 [2024-10-31 22:00:37,193 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 2386 states to 2368 states and 4445 transitions. [2024-10-31 22:00:37,194 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 2368 [2024-10-31 22:00:37,198 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 2368 [2024-10-31 22:00:37,199 INFO L73 IsDeterministic]: Start isDeterministic. Operand 2368 states and 4445 transitions. [2024-10-31 22:00:37,213 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:00:37,214 INFO L218 hiAutomatonCegarLoop]: Abstraction has 2368 states and 4445 transitions. [2024-10-31 22:00:37,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2368 states and 4445 transitions. [2024-10-31 22:00:37,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2368 to 2368. [2024-10-31 22:00:37,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2368 states, 2368 states have (on average 1.8771114864864864) internal successors, (4445), 2367 states have internal predecessors, (4445), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:37,339 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2368 states to 2368 states and 4445 transitions. [2024-10-31 22:00:37,340 INFO L240 hiAutomatonCegarLoop]: Abstraction has 2368 states and 4445 transitions. [2024-10-31 22:00:37,342 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-10-31 22:00:37,348 INFO L425 stractBuchiCegarLoop]: Abstraction has 2368 states and 4445 transitions. [2024-10-31 22:00:37,348 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-10-31 22:00:37,348 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2368 states and 4445 transitions. [2024-10-31 22:00:37,367 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1179 [2024-10-31 22:00:37,367 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:37,367 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:37,370 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:37,372 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:37,372 INFO L745 eck$LassoCheckResult]: Stem: 5174#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 5175#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6321#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5863#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 5864#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6050#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6837#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 6877#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 7002#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 5220#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5221#L423 assume 0 == initPersonOnFloor_~floor#1; 5873#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4934#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5435#L215 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4887#L227-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 4888#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 5650#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 5651#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 4986#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 4987#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 5263#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 4989#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 6429#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 7048#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 7158#L2083 assume !(0 != timeShift_~tmp___9~2#1); 6798#L2174 assume !(1 == ~doorState~0); 6799#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 6968#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 6811#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 5275#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 6112#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 6114#L1901 assume !(1 == ~currentHeading~0); 5959#L1911 assume !(0 == ~currentFloorID~0); 5960#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6907#L1917-1 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5710#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 6488#getCurrentFloorID_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 6489#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 5364#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 5365#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 5712#L2974-1 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 6964#timeShift_returnLabel#1 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6696#L879-2 [2024-10-31 22:00:37,373 INFO L747 eck$LassoCheckResult]: Loop: 6696#L879-2 assume !false; 5735#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 5736#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 6307#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6308#L887 assume 1 != cleanup_~tmp___0~0#1; 6490#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 5198#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 5199#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 6804#L1429 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 5098#anyStopRequested_returnLabel#1 isIdle_#t~ret24#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 5099#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6508#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 6509#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 5019#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 5202#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 5204#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 4890#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 5639#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 5640#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 7157#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 7050#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 6987#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5547#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 5548#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 5115#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 6585#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 6587#L1901-3 assume !(1 == ~currentHeading~0); 6808#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4983#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5447#L1917-7 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5448#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 6741#getCurrentFloorID_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 5655#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 5656#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 6428#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 6360#L2974-3 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 6781#timeShift_returnLabel#2 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6696#L879-2 [2024-10-31 22:00:37,373 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:37,374 INFO L85 PathProgramCache]: Analyzing trace with hash -961412041, now seen corresponding path program 1 times [2024-10-31 22:00:37,374 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:37,374 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [783847331] [2024-10-31 22:00:37,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:37,375 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:37,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:37,488 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:37,489 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:37,489 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [783847331] [2024-10-31 22:00:37,489 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [783847331] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:37,489 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:37,490 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:37,490 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1147545474] [2024-10-31 22:00:37,490 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:37,490 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:00:37,491 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:37,491 INFO L85 PathProgramCache]: Analyzing trace with hash -96215188, now seen corresponding path program 1 times [2024-10-31 22:00:37,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:37,491 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1414282784] [2024-10-31 22:00:37,492 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:37,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:37,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:37,604 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:37,605 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:37,605 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1414282784] [2024-10-31 22:00:37,605 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1414282784] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:37,605 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:37,606 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-31 22:00:37,606 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [651055570] [2024-10-31 22:00:37,606 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:37,606 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:00:37,607 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:00:37,607 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-10-31 22:00:37,607 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-10-31 22:00:37,609 INFO L87 Difference]: Start difference. First operand 2368 states and 4445 transitions. cyclomatic complexity: 2078 Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 7 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:39,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:00:39,362 INFO L93 Difference]: Finished difference Result 4778 states and 8887 transitions. [2024-10-31 22:00:39,362 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4778 states and 8887 transitions. [2024-10-31 22:00:39,407 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2413 [2024-10-31 22:00:39,437 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4778 states to 4778 states and 8887 transitions. [2024-10-31 22:00:39,438 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4778 [2024-10-31 22:00:39,445 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4778 [2024-10-31 22:00:39,445 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4778 states and 8887 transitions. [2024-10-31 22:00:39,454 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:00:39,454 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4778 states and 8887 transitions. [2024-10-31 22:00:39,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4778 states and 8887 transitions. [2024-10-31 22:00:39,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4778 to 4688. [2024-10-31 22:00:39,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4688 states, 4688 states have (on average 1.8764931740614335) internal successors, (8797), 4687 states have internal predecessors, (8797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:39,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4688 states to 4688 states and 8797 transitions. [2024-10-31 22:00:39,572 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4688 states and 8797 transitions. [2024-10-31 22:00:39,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-10-31 22:00:39,574 INFO L425 stractBuchiCegarLoop]: Abstraction has 4688 states and 8797 transitions. [2024-10-31 22:00:39,574 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-10-31 22:00:39,574 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4688 states and 8797 transitions. [2024-10-31 22:00:39,610 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2364 [2024-10-31 22:00:39,610 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:39,610 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:39,614 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:39,614 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:39,614 INFO L745 eck$LassoCheckResult]: Stem: 12337#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 12338#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 13524#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 13039#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 13040#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 13236#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 14072#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 14113#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 14262#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 12382#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 12383#L423 assume 0 == initPersonOnFloor_~floor#1; 13052#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 12099#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 12598#L215 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 13653#L227-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 15196#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 15195#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 15194#L152 assume !(0 == isFloorCalling_~floorID#1); 15193#L156 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 15189#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 15188#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 15186#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 15181#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 15179#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 15177#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 15175#L2083 assume !(0 != timeShift_~tmp___9~2#1); 15174#L2174 assume !(1 == ~doorState~0); 15171#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 15169#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 14656#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 14632#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 14631#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 14629#L1901 assume !(1 == ~currentHeading~0); 14628#L1911 assume !(0 == ~currentFloorID~0); 14626#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 14433#L1917-1 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 12884#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 13696#getCurrentFloorID_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 13697#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 14529#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 14524#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 14509#L2974-1 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 14403#timeShift_returnLabel#1 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 13923#L879-2 [2024-10-31 22:00:39,615 INFO L747 eck$LassoCheckResult]: Loop: 13923#L879-2 assume !false; 12908#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 12909#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 14504#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 14359#L887 assume 1 != cleanup_~tmp___0~0#1; 14360#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 14502#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 14501#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 14185#L1429 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 14186#anyStopRequested_returnLabel#1 isIdle_#t~ret24#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 15337#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 15336#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 15335#L152-26 assume !(0 == isFloorCalling_~floorID#1); 15332#L156-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 15330#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 15329#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 15328#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 15323#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 15322#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 15321#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 15320#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 15319#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 15317#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 15316#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 15272#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 14683#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 14681#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 14679#L1901-3 assume !(1 == ~currentHeading~0); 14204#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 12144#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 12610#L1917-7 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 12611#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 13969#getCurrentFloorID_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 12824#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 12825#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 13633#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 13563#L2974-3 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 14009#timeShift_returnLabel#2 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 13923#L879-2 [2024-10-31 22:00:39,615 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:39,618 INFO L85 PathProgramCache]: Analyzing trace with hash -789039010, now seen corresponding path program 1 times [2024-10-31 22:00:39,618 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:39,619 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1661921513] [2024-10-31 22:00:39,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:39,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:39,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:39,751 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:39,752 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:39,752 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1661921513] [2024-10-31 22:00:39,752 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1661921513] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:39,753 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:39,753 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:39,754 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [564670544] [2024-10-31 22:00:39,755 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:39,755 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:00:39,755 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:39,756 INFO L85 PathProgramCache]: Analyzing trace with hash 950560046, now seen corresponding path program 1 times [2024-10-31 22:00:39,756 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:39,756 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1561746861] [2024-10-31 22:00:39,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:39,757 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:39,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:39,878 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:39,878 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:39,879 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1561746861] [2024-10-31 22:00:39,880 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1561746861] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:39,880 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:39,882 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-31 22:00:39,882 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [549531995] [2024-10-31 22:00:39,883 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:39,883 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:00:39,883 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:00:39,884 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-31 22:00:39,884 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-31 22:00:39,885 INFO L87 Difference]: Start difference. First operand 4688 states and 8797 transitions. cyclomatic complexity: 4110 Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:42,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:00:42,392 INFO L93 Difference]: Finished difference Result 8432 states and 15802 transitions. [2024-10-31 22:00:42,392 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 8432 states and 15802 transitions. [2024-10-31 22:00:42,463 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4288 [2024-10-31 22:00:42,519 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 8432 states to 8432 states and 15802 transitions. [2024-10-31 22:00:42,519 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 8432 [2024-10-31 22:00:42,531 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 8432 [2024-10-31 22:00:42,532 INFO L73 IsDeterministic]: Start isDeterministic. Operand 8432 states and 15802 transitions. [2024-10-31 22:00:42,545 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:00:42,545 INFO L218 hiAutomatonCegarLoop]: Abstraction has 8432 states and 15802 transitions. [2024-10-31 22:00:42,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8432 states and 15802 transitions. [2024-10-31 22:00:42,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8432 to 8414. [2024-10-31 22:00:42,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8414 states, 8414 states have (on average 1.8744948894699311) internal successors, (15772), 8413 states have internal predecessors, (15772), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:42,933 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8414 states to 8414 states and 15772 transitions. [2024-10-31 22:00:42,934 INFO L240 hiAutomatonCegarLoop]: Abstraction has 8414 states and 15772 transitions. [2024-10-31 22:00:42,934 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-10-31 22:00:42,935 INFO L425 stractBuchiCegarLoop]: Abstraction has 8414 states and 15772 transitions. [2024-10-31 22:00:42,936 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-10-31 22:00:42,936 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8414 states and 15772 transitions. [2024-10-31 22:00:43,019 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4279 [2024-10-31 22:00:43,019 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:43,019 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:43,023 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:43,023 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:43,024 INFO L745 eck$LassoCheckResult]: Stem: 25472#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 25473#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 26660#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 26174#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 26175#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 26370#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 27237#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 27280#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 27431#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 25514#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 25515#L423 assume 0 == initPersonOnFloor_~floor#1; 26184#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 25230#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 25735#L215 assume !(0 == callOnFloor_~floorID#1); 26511#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 26512#L227-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 32203#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 32202#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 32195#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 32196#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 32363#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 32362#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 25285#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 26775#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 27493#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 32616#L2083 assume !(0 != timeShift_~tmp___9~2#1); 27189#L2174 assume !(1 == ~doorState~0); 27190#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 32640#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 32641#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 25718#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 26438#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 26440#L1901 assume !(1 == ~currentHeading~0); 27053#L1911 assume !(0 == ~currentFloorID~0); 26277#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 27313#L1917-1 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 27925#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 27923#getCurrentFloorID_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 27918#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 27908#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 27897#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 27880#L2974-1 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 27878#timeShift_returnLabel#1 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 27876#L879-2 [2024-10-31 22:00:43,024 INFO L747 eck$LassoCheckResult]: Loop: 27876#L879-2 assume !false; 27875#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 27874#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 27873#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 27872#L887 assume 1 != cleanup_~tmp___0~0#1; 27871#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 27870#L152-21 assume !(0 == isFloorCalling_~floorID#1); 27857#L156-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 27845#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 27837#L1429 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 27828#anyStopRequested_returnLabel#1 isIdle_#t~ret24#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 27827#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 27826#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 27820#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 27817#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 27812#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 27802#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 27797#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 27795#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 27793#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 27792#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 27791#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 27778#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 27773#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 27734#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 27732#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 27726#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 27200#L1901-3 assume !(1 == ~currentHeading~0); 27202#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 25277#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 27071#L1917-7 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 27922#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 27915#getCurrentFloorID_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 27913#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 27907#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 27886#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 27879#L2974-3 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 27877#timeShift_returnLabel#2 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 27876#L879-2 [2024-10-31 22:00:43,025 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:43,026 INFO L85 PathProgramCache]: Analyzing trace with hash -1516280664, now seen corresponding path program 1 times [2024-10-31 22:00:43,026 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:43,026 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1111001907] [2024-10-31 22:00:43,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:43,027 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:43,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:43,189 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:43,190 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:43,190 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1111001907] [2024-10-31 22:00:43,191 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1111001907] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:43,191 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:43,191 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:43,192 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1545607970] [2024-10-31 22:00:43,192 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:43,192 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:00:43,193 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:43,193 INFO L85 PathProgramCache]: Analyzing trace with hash -984260868, now seen corresponding path program 1 times [2024-10-31 22:00:43,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:43,194 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [455189955] [2024-10-31 22:00:43,194 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:43,195 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:43,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:43,246 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:43,247 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:43,247 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [455189955] [2024-10-31 22:00:43,247 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [455189955] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:43,248 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:43,248 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:43,248 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1385113344] [2024-10-31 22:00:43,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:43,249 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:00:43,249 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:00:43,250 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-10-31 22:00:43,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-10-31 22:00:43,251 INFO L87 Difference]: Start difference. First operand 8414 states and 15772 transitions. cyclomatic complexity: 7359 Second operand has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:43,985 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:00:43,985 INFO L93 Difference]: Finished difference Result 8260 states and 15456 transitions. [2024-10-31 22:00:43,985 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 8260 states and 15456 transitions. [2024-10-31 22:00:44,035 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4157 [2024-10-31 22:00:44,083 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 8260 states to 8260 states and 15456 transitions. [2024-10-31 22:00:44,084 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 8260 [2024-10-31 22:00:44,094 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 8260 [2024-10-31 22:00:44,095 INFO L73 IsDeterministic]: Start isDeterministic. Operand 8260 states and 15456 transitions. [2024-10-31 22:00:44,107 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:00:44,107 INFO L218 hiAutomatonCegarLoop]: Abstraction has 8260 states and 15456 transitions. [2024-10-31 22:00:44,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8260 states and 15456 transitions. [2024-10-31 22:00:44,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8260 to 8260. [2024-10-31 22:00:44,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8260 states, 8260 states have (on average 1.8711864406779661) internal successors, (15456), 8259 states have internal predecessors, (15456), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:44,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8260 states to 8260 states and 15456 transitions. [2024-10-31 22:00:44,280 INFO L240 hiAutomatonCegarLoop]: Abstraction has 8260 states and 15456 transitions. [2024-10-31 22:00:44,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-10-31 22:00:44,282 INFO L425 stractBuchiCegarLoop]: Abstraction has 8260 states and 15456 transitions. [2024-10-31 22:00:44,282 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-10-31 22:00:44,283 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8260 states and 15456 transitions. [2024-10-31 22:00:44,398 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4157 [2024-10-31 22:00:44,398 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:44,398 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:44,400 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:44,401 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:44,401 INFO L745 eck$LassoCheckResult]: Stem: 42144#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 42145#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 43287#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 42834#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 42835#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 43019#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 43827#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 43867#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 43999#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 42186#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 42187#L423 assume 0 == initPersonOnFloor_~floor#1; 42844#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 41904#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 42402#L215 assume !(0 == callOnFloor_~floorID#1); 43148#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 43149#L227-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 45436#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 45435#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 45433#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 41955#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 41956#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 42230#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 41958#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 43398#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 42340#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 42341#L2083 assume !(0 != timeShift_~tmp___9~2#1); 43784#L2174 assume !(1 == ~doorState~0); 43785#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 43960#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 43961#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 44573#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 44569#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 44567#L1901 assume !(1 == ~currentHeading~0); 44471#L1911 assume !(0 == ~currentFloorID~0); 44466#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 44450#L1917-1 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 44444#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 44442#getCurrentFloorID_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 44437#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 44428#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 44417#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 44400#L2974-1 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 44398#timeShift_returnLabel#1 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 44396#L879-2 [2024-10-31 22:00:44,402 INFO L747 eck$LassoCheckResult]: Loop: 44396#L879-2 assume !false; 44395#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 44394#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 44393#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 44392#L887 assume 1 != cleanup_~tmp___0~0#1; 44391#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 44390#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 44385#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 44370#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 44364#L1433 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 44353#anyStopRequested_returnLabel#1 isIdle_#t~ret24#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 44352#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 44351#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 44349#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 44348#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 44347#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 44346#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 44341#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 44339#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 44338#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 44335#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 44332#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 44298#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 44289#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 44266#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 44262#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 44251#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 44252#L1901-3 assume !(1 == ~currentHeading~0); 44463#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 44459#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 44448#L1917-7 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 44443#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 44441#getCurrentFloorID_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 44433#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 44427#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 44406#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 44399#L2974-3 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 44397#timeShift_returnLabel#2 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 44396#L879-2 [2024-10-31 22:00:44,402 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:44,403 INFO L85 PathProgramCache]: Analyzing trace with hash -1516280664, now seen corresponding path program 2 times [2024-10-31 22:00:44,403 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:44,403 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1068526461] [2024-10-31 22:00:44,403 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:44,403 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:44,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:44,513 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:44,516 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:44,516 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1068526461] [2024-10-31 22:00:44,516 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1068526461] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:44,517 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:44,517 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:44,517 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [612942621] [2024-10-31 22:00:44,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:44,518 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:00:44,518 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:44,518 INFO L85 PathProgramCache]: Analyzing trace with hash 338332849, now seen corresponding path program 1 times [2024-10-31 22:00:44,519 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:44,519 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [108657851] [2024-10-31 22:00:44,519 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:44,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:44,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:44,609 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:44,612 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:44,613 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [108657851] [2024-10-31 22:00:44,613 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [108657851] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:44,613 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:44,613 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-31 22:00:44,613 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [230715366] [2024-10-31 22:00:44,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:44,614 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:00:44,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:00:44,614 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-31 22:00:44,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-31 22:00:44,615 INFO L87 Difference]: Start difference. First operand 8260 states and 15456 transitions. cyclomatic complexity: 7197 Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:44,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:00:44,997 INFO L93 Difference]: Finished difference Result 14983 states and 28040 transitions. [2024-10-31 22:00:44,998 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14983 states and 28040 transitions. [2024-10-31 22:00:45,092 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2024-10-31 22:00:45,168 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14983 states to 14983 states and 28040 transitions. [2024-10-31 22:00:45,168 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14983 [2024-10-31 22:00:45,189 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14983 [2024-10-31 22:00:45,189 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14983 states and 28040 transitions. [2024-10-31 22:00:45,207 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:00:45,207 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14983 states and 28040 transitions. [2024-10-31 22:00:45,224 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14983 states and 28040 transitions. [2024-10-31 22:00:45,490 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14983 to 14983. [2024-10-31 22:00:45,515 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14983 states, 14983 states have (on average 1.871454314890209) internal successors, (28040), 14982 states have internal predecessors, (28040), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:45,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14983 states to 14983 states and 28040 transitions. [2024-10-31 22:00:45,560 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14983 states and 28040 transitions. [2024-10-31 22:00:45,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-31 22:00:45,562 INFO L425 stractBuchiCegarLoop]: Abstraction has 14983 states and 28040 transitions. [2024-10-31 22:00:45,562 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-10-31 22:00:45,562 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14983 states and 28040 transitions. [2024-10-31 22:00:45,624 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2024-10-31 22:00:45,625 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:45,625 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:45,630 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:45,630 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:45,631 INFO L745 eck$LassoCheckResult]: Stem: 65401#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 65402#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 66559#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 66094#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 66095#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 66284#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 67114#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 67157#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 67294#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 65443#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 65444#L423 assume 0 == initPersonOnFloor_~floor#1; 66104#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 65161#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 65660#L215 assume !(0 == callOnFloor_~floorID#1); 66416#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 66417#L227-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 67842#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 67841#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 67839#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 67840#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 67874#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 67786#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 67781#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 67780#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 67779#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 67778#L2083 assume !(0 != timeShift_~tmp___9~2#1); 67777#L2174 assume !(1 == ~doorState~0); 67776#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 67773#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 67664#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 67648#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 67640#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 67633#L1901 assume !(1 == ~currentHeading~0); 67624#L1911 assume !(0 == ~currentFloorID~0); 67618#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 67614#L1917-1 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 67604#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 67605#getCurrentFloorID_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 67593#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 67591#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 67565#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 67562#L2974-1 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 67542#timeShift_returnLabel#1 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 67541#L879-2 [2024-10-31 22:00:45,631 INFO L747 eck$LassoCheckResult]: Loop: 67541#L879-2 assume !false; 67536#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 67537#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 67532#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 67533#L887 assume 1 != cleanup_~tmp___0~0#1; 67528#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 67529#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 67524#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 67525#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 67519#L1433 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 67521#L152-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 68482#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret20#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret20#1;havoc anyStopRequested_#t~ret20#1; 68474#L1440 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 68467#anyStopRequested_returnLabel#1 isIdle_#t~ret24#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 68465#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 68449#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 68444#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 68443#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 68442#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 68441#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 68432#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 68421#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 68419#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 68415#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 68404#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 68396#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 68359#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 68130#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 68070#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 68064#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 68056#L1901-3 assume !(1 == ~currentHeading~0); 68047#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 68039#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 68036#L1917-7 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 68031#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 68028#getCurrentFloorID_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 67611#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 67607#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 67553#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 67548#L2974-3 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 67540#timeShift_returnLabel#2 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 67541#L879-2 [2024-10-31 22:00:45,631 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:45,632 INFO L85 PathProgramCache]: Analyzing trace with hash -1516280664, now seen corresponding path program 3 times [2024-10-31 22:00:45,632 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:45,632 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [967898482] [2024-10-31 22:00:45,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:45,633 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:45,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:45,839 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:45,840 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:45,840 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [967898482] [2024-10-31 22:00:45,840 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [967898482] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:45,841 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:45,841 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:45,841 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [599162553] [2024-10-31 22:00:45,841 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:45,842 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:00:45,842 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:45,842 INFO L85 PathProgramCache]: Analyzing trace with hash 269781844, now seen corresponding path program 1 times [2024-10-31 22:00:45,843 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:45,843 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1896802099] [2024-10-31 22:00:45,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:45,843 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:45,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:45,909 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:45,910 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:45,910 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1896802099] [2024-10-31 22:00:45,910 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1896802099] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:45,911 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:45,911 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-31 22:00:45,911 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1737776481] [2024-10-31 22:00:45,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:45,912 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:00:45,912 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:00:45,912 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-31 22:00:45,913 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-31 22:00:45,914 INFO L87 Difference]: Start difference. First operand 14983 states and 28040 transitions. cyclomatic complexity: 13058 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:47,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:00:47,143 INFO L93 Difference]: Finished difference Result 14983 states and 27896 transitions. [2024-10-31 22:00:47,143 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14983 states and 27896 transitions. [2024-10-31 22:00:47,247 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2024-10-31 22:00:47,327 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14983 states to 14983 states and 27896 transitions. [2024-10-31 22:00:47,327 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14983 [2024-10-31 22:00:47,356 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14983 [2024-10-31 22:00:47,357 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14983 states and 27896 transitions. [2024-10-31 22:00:47,374 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:00:47,374 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14983 states and 27896 transitions. [2024-10-31 22:00:47,390 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14983 states and 27896 transitions. [2024-10-31 22:00:47,606 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14983 to 14983. [2024-10-31 22:00:47,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14983 states, 14983 states have (on average 1.8618434225455516) internal successors, (27896), 14982 states have internal predecessors, (27896), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:47,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14983 states to 14983 states and 27896 transitions. [2024-10-31 22:00:47,674 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14983 states and 27896 transitions. [2024-10-31 22:00:47,676 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-31 22:00:47,676 INFO L425 stractBuchiCegarLoop]: Abstraction has 14983 states and 27896 transitions. [2024-10-31 22:00:47,676 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-10-31 22:00:47,677 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14983 states and 27896 transitions. [2024-10-31 22:00:47,742 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2024-10-31 22:00:47,742 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:47,743 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:47,809 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:47,809 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:47,809 INFO L745 eck$LassoCheckResult]: Stem: 95372#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 95373#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 96541#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 96065#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 96066#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 96259#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 97089#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 97131#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 97267#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 95414#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 95415#L423 assume 0 == initPersonOnFloor_~floor#1; 96075#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 95135#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 95632#L215 assume !(0 == callOnFloor_~floorID#1); 96397#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 96398#L227-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 97831#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 97827#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 97825#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 97824#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 97823#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 97765#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 97760#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 97756#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 97755#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 97752#L2083 assume !(0 != timeShift_~tmp___9~2#1); 97751#L2174 assume !(1 == ~doorState~0); 97750#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 97748#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 97638#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 97622#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 97614#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 97607#L1901 assume !(1 == ~currentHeading~0); 97598#L1911 assume !(0 == ~currentFloorID~0); 97592#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 97588#L1917-1 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 97587#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 98453#getCurrentFloorID_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 98449#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 98446#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 97536#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 97533#L2974-1 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 97513#timeShift_returnLabel#1 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 97512#L879-2 [2024-10-31 22:00:47,813 INFO L747 eck$LassoCheckResult]: Loop: 97512#L879-2 assume !false; 97507#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 97508#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 97503#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 97504#L887 assume 1 != cleanup_~tmp___0~0#1; 97499#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 97500#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 97495#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 97496#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 97489#L1433 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 97491#L152-22 assume !(0 == isFloorCalling_~floorID#1); 98397#L156-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 98395#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret20#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret20#1;havoc anyStopRequested_#t~ret20#1; 98360#L1440 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 98350#anyStopRequested_returnLabel#1 isIdle_#t~ret24#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 98349#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 98348#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 98346#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 98345#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 98344#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 98341#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 98336#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 98334#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 98333#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 98331#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 98328#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 98324#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 98322#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 98102#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 98042#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 98036#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 98028#L1901-3 assume !(1 == ~currentHeading~0); 98019#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 98011#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 98008#L1917-7 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 98003#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 98000#getCurrentFloorID_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 98001#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 98489#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 97524#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 97519#L2974-3 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 97511#timeShift_returnLabel#2 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 97512#L879-2 [2024-10-31 22:00:47,814 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:47,814 INFO L85 PathProgramCache]: Analyzing trace with hash -1516280664, now seen corresponding path program 4 times [2024-10-31 22:00:47,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:47,814 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [780912806] [2024-10-31 22:00:47,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:47,815 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:47,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:47,896 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:47,896 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:47,896 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [780912806] [2024-10-31 22:00:47,896 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [780912806] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:47,897 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:47,897 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:47,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [922706945] [2024-10-31 22:00:47,897 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:47,898 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:00:47,898 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:47,898 INFO L85 PathProgramCache]: Analyzing trace with hash 1646671545, now seen corresponding path program 1 times [2024-10-31 22:00:47,898 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:47,899 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [249132403] [2024-10-31 22:00:47,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:47,899 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:47,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:47,943 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:47,943 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:47,943 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [249132403] [2024-10-31 22:00:47,943 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [249132403] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:47,944 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:47,944 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-31 22:00:47,944 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1185408151] [2024-10-31 22:00:47,944 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:47,944 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:00:47,945 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:00:47,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-31 22:00:47,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-31 22:00:47,945 INFO L87 Difference]: Start difference. First operand 14983 states and 27896 transitions. cyclomatic complexity: 12914 Second operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:48,167 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:00:48,167 INFO L93 Difference]: Finished difference Result 15012 states and 27925 transitions. [2024-10-31 22:00:48,167 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15012 states and 27925 transitions. [2024-10-31 22:00:48,219 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8270 [2024-10-31 22:00:48,275 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15012 states to 15012 states and 27925 transitions. [2024-10-31 22:00:48,275 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15012 [2024-10-31 22:00:48,289 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15012 [2024-10-31 22:00:48,289 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15012 states and 27925 transitions. [2024-10-31 22:00:48,304 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:00:48,304 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15012 states and 27925 transitions. [2024-10-31 22:00:48,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15012 states and 27925 transitions. [2024-10-31 22:00:48,718 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15012 to 15001. [2024-10-31 22:00:48,735 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15001 states, 15001 states have (on average 1.8608092793813746) internal successors, (27914), 15000 states have internal predecessors, (27914), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:48,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15001 states to 15001 states and 27914 transitions. [2024-10-31 22:00:48,771 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15001 states and 27914 transitions. [2024-10-31 22:00:48,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-31 22:00:48,774 INFO L425 stractBuchiCegarLoop]: Abstraction has 15001 states and 27914 transitions. [2024-10-31 22:00:48,774 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-10-31 22:00:48,774 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15001 states and 27914 transitions. [2024-10-31 22:00:48,825 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8264 [2024-10-31 22:00:48,825 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:48,825 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:48,830 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:48,830 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:48,831 INFO L745 eck$LassoCheckResult]: Stem: 125376#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 125377#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 126533#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 126074#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 126075#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 126264#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 127084#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 127124#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 127263#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 125418#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 125419#L423 assume 0 == initPersonOnFloor_~floor#1; 126084#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 125138#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 125637#L215 assume !(0 == callOnFloor_~floorID#1); 126391#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 126392#L227-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 127748#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 127747#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 127745#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 127744#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 127743#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 127741#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 127737#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 127735#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 127734#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 127732#L2083 assume !(0 != timeShift_~tmp___9~2#1); 127731#L2174 assume !(1 == ~doorState~0); 127730#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 127728#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 127729#L1694 assume !(0 == ~currentFloorID~0); 127688#L1700 assume !(~currentFloorID~0 > 0); 127612#$Ultimate##2182 assume ~currentFloorID~0 > 0; 127707#L1717 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 127705#L1718 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~13#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 127706#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 139280#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 139277#L1901 assume !(1 == ~currentHeading~0); 139274#L1911 assume !(0 == ~currentFloorID~0); 139271#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 139258#L1917-1 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 139256#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 139255#getCurrentFloorID_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 139251#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 139245#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 138804#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 138799#L2974-1 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 138798#timeShift_returnLabel#1 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 138796#L879-2 [2024-10-31 22:00:48,831 INFO L747 eck$LassoCheckResult]: Loop: 138796#L879-2 assume !false; 138766#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 138764#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 138763#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 138762#L887 assume 1 != cleanup_~tmp___0~0#1; 138761#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 138755#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 138754#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 138752#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 138751#L1433 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 128229#anyStopRequested_returnLabel#1 isIdle_#t~ret24#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 138750#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 138749#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 138741#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 138739#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 138728#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 138729#L1338-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 138736#L1342-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 138733#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 138731#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 138732#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 138955#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 138956#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 138995#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 138993#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 138994#L1694-2 assume !(0 == ~currentFloorID~0); 139019#L1700-2 assume !(~currentFloorID~0 > 0); 138881#$Ultimate##4725 assume ~currentFloorID~0 > 0; 139074#L1717-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 138862#L1718-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~13#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 128138#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 138850#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 138848#L1901-3 assume !(1 == ~currentHeading~0); 138844#L1911-9 assume !(0 == ~currentFloorID~0); 138840#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 138839#L1917-7 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 138835#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 138834#getCurrentFloorID_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 138832#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 138827#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 138819#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 138800#L2974-3 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 138797#timeShift_returnLabel#2 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 138796#L879-2 [2024-10-31 22:00:48,832 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:48,833 INFO L85 PathProgramCache]: Analyzing trace with hash -721880161, now seen corresponding path program 1 times [2024-10-31 22:00:48,833 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:48,835 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [754075779] [2024-10-31 22:00:48,835 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:48,836 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:48,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:49,054 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:49,055 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:49,055 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [754075779] [2024-10-31 22:00:49,055 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [754075779] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:49,055 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:49,059 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:49,059 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1244741656] [2024-10-31 22:00:49,060 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:49,060 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:00:49,060 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:49,060 INFO L85 PathProgramCache]: Analyzing trace with hash 1314929166, now seen corresponding path program 1 times [2024-10-31 22:00:49,061 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:49,061 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [172720654] [2024-10-31 22:00:49,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:49,061 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:49,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:49,121 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:49,121 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:49,121 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [172720654] [2024-10-31 22:00:49,121 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [172720654] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:49,122 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:49,122 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-31 22:00:49,122 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [116616539] [2024-10-31 22:00:49,122 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:49,122 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:00:49,123 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:00:49,123 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-31 22:00:49,123 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-31 22:00:49,124 INFO L87 Difference]: Start difference. First operand 15001 states and 27914 transitions. cyclomatic complexity: 12914 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:50,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:00:50,319 INFO L93 Difference]: Finished difference Result 11400 states and 21104 transitions. [2024-10-31 22:00:50,319 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11400 states and 21104 transitions. [2024-10-31 22:00:50,450 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8317 [2024-10-31 22:00:50,497 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11400 states to 11400 states and 21104 transitions. [2024-10-31 22:00:50,497 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11400 [2024-10-31 22:00:50,509 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11400 [2024-10-31 22:00:50,510 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11400 states and 21104 transitions. [2024-10-31 22:00:50,528 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:00:50,528 INFO L218 hiAutomatonCegarLoop]: Abstraction has 11400 states and 21104 transitions. [2024-10-31 22:00:50,544 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11400 states and 21104 transitions. [2024-10-31 22:00:50,711 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11400 to 11391. [2024-10-31 22:00:50,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11391 states, 11391 states have (on average 1.8513738916688613) internal successors, (21089), 11390 states have internal predecessors, (21089), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:50,765 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11391 states to 11391 states and 21089 transitions. [2024-10-31 22:00:50,766 INFO L240 hiAutomatonCegarLoop]: Abstraction has 11391 states and 21089 transitions. [2024-10-31 22:00:50,766 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-10-31 22:00:50,767 INFO L425 stractBuchiCegarLoop]: Abstraction has 11391 states and 21089 transitions. [2024-10-31 22:00:50,767 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-10-31 22:00:50,768 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11391 states and 21089 transitions. [2024-10-31 22:00:50,821 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8308 [2024-10-31 22:00:50,822 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:50,822 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:50,824 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:50,824 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:50,825 INFO L745 eck$LassoCheckResult]: Stem: 151765#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 151766#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 152856#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 152409#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 152410#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 152589#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 153389#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 153431#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 153563#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 151807#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 151808#L423 assume 0 == initPersonOnFloor_~floor#1; 152419#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 151543#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 152004#L215 assume !(0 == callOnFloor_~floorID#1); 152715#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 152716#L227-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 153790#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 153789#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 153788#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 153787#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 153786#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 151847#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 151848#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 152962#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 153617#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 153784#L2083 assume !(0 != timeShift_~tmp___9~2#1); 153349#L2174 assume !(1 == ~doorState~0); 153350#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 153528#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 153366#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 151988#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 152648#L2182 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 152649#L1956 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 153232#getReverseHeading_returnLabel#1 timeShift_#t~ret59#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 153233#L1525-1 assume !(1 == stopRequestedInDirection_~dir#1); 151634#L1694-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 151611#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 153226#L2191 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 152785#L1901-2 assume !(1 == ~currentHeading~0); 152787#L1911-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 152904#L1911-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 153353#L1917-5 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 152263#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 153829#getCurrentFloorID_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 153825#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 153821#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 153822#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 157483#L2974-1 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 157482#timeShift_returnLabel#1 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 157480#L879-2 [2024-10-31 22:00:50,826 INFO L747 eck$LassoCheckResult]: Loop: 157480#L879-2 assume !false; 157479#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 157478#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 157477#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 157476#L887 assume 1 != cleanup_~tmp___0~0#1; 157475#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 157474#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 157473#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 157471#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 157469#L1433 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 157468#L152-22 assume !(0 == isFloorCalling_~floorID#1); 157465#L156-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 157463#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret20#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret20#1;havoc anyStopRequested_#t~ret20#1; 157462#L1440 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 157451#anyStopRequested_returnLabel#1 isIdle_#t~ret24#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 157450#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 157449#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 157448#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 155724#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 155723#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 155722#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 155721#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 155719#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 155718#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 155716#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 155715#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 155714#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 155712#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 155713#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 155710#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 156024#L2182-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 156022#L1956-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 156020#getReverseHeading_returnLabel#3 timeShift_#t~ret59#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 156017#L1525-3 assume !(1 == stopRequestedInDirection_~dir#1); 155856#L1694-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 155841#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 155825#L2191-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 155820#L1901-5 assume !(1 == ~currentHeading~0); 155816#L1911-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 155805#L1911-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 155800#L1917-11 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 155801#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 157535#getCurrentFloorID_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 157533#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 157528#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 157520#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 157514#L2974-3 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 157481#timeShift_returnLabel#2 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 157480#L879-2 [2024-10-31 22:00:50,827 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:50,827 INFO L85 PathProgramCache]: Analyzing trace with hash 2005292259, now seen corresponding path program 1 times [2024-10-31 22:00:50,827 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:50,828 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [22789588] [2024-10-31 22:00:50,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:50,828 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:50,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:50,926 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:50,926 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:50,926 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [22789588] [2024-10-31 22:00:50,926 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [22789588] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:50,927 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:50,927 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:50,927 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [310717135] [2024-10-31 22:00:50,927 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:50,928 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:00:50,928 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:50,928 INFO L85 PathProgramCache]: Analyzing trace with hash 739571150, now seen corresponding path program 1 times [2024-10-31 22:00:50,929 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:50,929 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1759875888] [2024-10-31 22:00:50,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:50,929 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:50,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:51,028 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:51,029 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:51,029 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1759875888] [2024-10-31 22:00:51,029 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1759875888] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:51,029 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:51,030 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-31 22:00:51,030 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [704007528] [2024-10-31 22:00:51,030 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:51,031 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:00:51,031 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:00:51,031 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-31 22:00:51,032 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-31 22:00:51,032 INFO L87 Difference]: Start difference. First operand 11391 states and 21089 transitions. cyclomatic complexity: 9699 Second operand has 4 states, 4 states have (on average 12.0) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:51,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:00:51,268 INFO L93 Difference]: Finished difference Result 11409 states and 21107 transitions. [2024-10-31 22:00:51,269 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11409 states and 21107 transitions. [2024-10-31 22:00:51,318 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8323 [2024-10-31 22:00:51,349 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11409 states to 11409 states and 21107 transitions. [2024-10-31 22:00:51,349 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11409 [2024-10-31 22:00:51,358 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11409 [2024-10-31 22:00:51,359 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11409 states and 21107 transitions. [2024-10-31 22:00:51,371 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:00:51,371 INFO L218 hiAutomatonCegarLoop]: Abstraction has 11409 states and 21107 transitions. [2024-10-31 22:00:51,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11409 states and 21107 transitions. [2024-10-31 22:00:51,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11409 to 11403. [2024-10-31 22:00:51,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11403 states, 11403 states have (on average 1.8504779444005963) internal successors, (21101), 11402 states have internal predecessors, (21101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:51,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11403 states to 11403 states and 21101 transitions. [2024-10-31 22:00:51,538 INFO L240 hiAutomatonCegarLoop]: Abstraction has 11403 states and 21101 transitions. [2024-10-31 22:00:51,539 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-31 22:00:51,539 INFO L425 stractBuchiCegarLoop]: Abstraction has 11403 states and 21101 transitions. [2024-10-31 22:00:51,540 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-10-31 22:00:51,540 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11403 states and 21101 transitions. [2024-10-31 22:00:51,578 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8318 [2024-10-31 22:00:51,578 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:51,579 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:51,580 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:51,580 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:51,580 INFO L745 eck$LassoCheckResult]: Stem: 174572#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 174573#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 175651#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 175209#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 175210#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 175388#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 176166#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 176205#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 176326#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 174613#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 174614#L423 assume 0 == initPersonOnFloor_~floor#1; 175221#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 174351#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 174810#L215 assume !(0 == callOnFloor_~floorID#1); 175511#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 175512#L227-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 176536#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 176535#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 176534#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 176533#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 176532#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 174653#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 174654#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 175754#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 176378#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 176530#L2083 assume !(0 != timeShift_~tmp___9~2#1); 176127#L2174 assume !(1 == ~doorState~0); 176128#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 176292#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 176143#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 174795#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 175446#L2182 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 175447#L1956 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 176424#getReverseHeading_returnLabel#1 timeShift_#t~ret59#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 176529#L1525-1 assume !(1 == stopRequestedInDirection_~dir#1); 174441#L1694-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 174419#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 176012#L2191 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 175581#L1901-2 assume !(1 == ~currentHeading~0); 175583#L1911-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 175698#L1911-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 176130#L1917-5 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 175067#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 178729#getCurrentFloorID_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 178725#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 178722#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 178712#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 178708#L2974-1 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 178706#timeShift_returnLabel#1 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 178707#L879-2 [2024-10-31 22:00:51,581 INFO L747 eck$LassoCheckResult]: Loop: 178707#L879-2 assume !false; 182140#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 182139#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 182138#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 182137#L887 assume 1 != cleanup_~tmp___0~0#1; 182136#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 182135#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 182134#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 182132#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 182130#L1433 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 182129#L152-22 assume !(0 == isFloorCalling_~floorID#1); 182126#L156-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 182124#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret20#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret20#1;havoc anyStopRequested_#t~ret20#1; 182123#L1440 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 182112#anyStopRequested_returnLabel#1 isIdle_#t~ret24#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 182111#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 182109#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 182106#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 182105#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 182104#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 182103#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 182102#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 182097#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 182095#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 182092#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 176380#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 176311#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 174914#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 174915#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 175309#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 182361#L2182-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 182233#L1956-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 182354#getReverseHeading_returnLabel#3 timeShift_#t~ret59#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 182353#L1525-3 assume !(1 == stopRequestedInDirection_~dir#1); 182317#L1694-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 182308#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 182306#L2191-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 182299#L1901-5 assume !(1 == ~currentHeading~0); 182293#L1911-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 182285#L1911-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 178480#L1917-11 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 178481#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 182163#getCurrentFloorID_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 182161#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 182156#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 182148#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 182142#L2974-3 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 182141#timeShift_returnLabel#2 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 178707#L879-2 [2024-10-31 22:00:51,581 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:51,582 INFO L85 PathProgramCache]: Analyzing trace with hash 2005292259, now seen corresponding path program 2 times [2024-10-31 22:00:51,582 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:51,582 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [447223036] [2024-10-31 22:00:51,582 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:51,582 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:51,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:51,651 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:51,651 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:51,651 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [447223036] [2024-10-31 22:00:51,651 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [447223036] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:51,652 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:51,652 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:51,652 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [219975521] [2024-10-31 22:00:51,652 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:51,652 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:00:51,652 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:51,652 INFO L85 PathProgramCache]: Analyzing trace with hash -848776752, now seen corresponding path program 1 times [2024-10-31 22:00:51,653 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:51,653 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1611183514] [2024-10-31 22:00:51,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:51,653 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:51,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:51,714 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:51,714 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:51,714 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1611183514] [2024-10-31 22:00:51,714 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1611183514] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:51,715 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:51,715 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-31 22:00:51,715 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1876600403] [2024-10-31 22:00:51,715 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:51,716 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:00:51,716 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:00:51,716 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-31 22:00:51,716 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-31 22:00:51,717 INFO L87 Difference]: Start difference. First operand 11403 states and 21101 transitions. cyclomatic complexity: 9699 Second operand has 4 states, 4 states have (on average 12.0) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:52,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:00:52,089 INFO L93 Difference]: Finished difference Result 11497 states and 21195 transitions. [2024-10-31 22:00:52,089 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11497 states and 21195 transitions. [2024-10-31 22:00:52,140 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8390 [2024-10-31 22:00:52,175 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11497 states to 11497 states and 21195 transitions. [2024-10-31 22:00:52,175 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11497 [2024-10-31 22:00:52,186 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11497 [2024-10-31 22:00:52,186 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11497 states and 21195 transitions. [2024-10-31 22:00:52,200 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:00:52,200 INFO L218 hiAutomatonCegarLoop]: Abstraction has 11497 states and 21195 transitions. [2024-10-31 22:00:52,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11497 states and 21195 transitions. [2024-10-31 22:00:52,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11497 to 11437. [2024-10-31 22:00:52,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11437 states, 11437 states have (on average 1.8479496371426074) internal successors, (21135), 11436 states have internal predecessors, (21135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:00:52,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11437 states to 11437 states and 21135 transitions. [2024-10-31 22:00:52,356 INFO L240 hiAutomatonCegarLoop]: Abstraction has 11437 states and 21135 transitions. [2024-10-31 22:00:52,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-31 22:00:52,357 INFO L425 stractBuchiCegarLoop]: Abstraction has 11437 states and 21135 transitions. [2024-10-31 22:00:52,357 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-10-31 22:00:52,357 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11437 states and 21135 transitions. [2024-10-31 22:00:52,390 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8342 [2024-10-31 22:00:52,390 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:00:52,391 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:00:52,393 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:52,393 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:00:52,393 INFO L745 eck$LassoCheckResult]: Stem: 197481#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 197482#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 198563#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 198119#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 198120#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 198300#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 199094#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 199139#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 199269#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 197519#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 197520#L423 assume 0 == initPersonOnFloor_~floor#1; 198129#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 197258#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 197720#L215 assume !(0 == callOnFloor_~floorID#1); 198425#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 197214#L227-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 197215#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 197919#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 197920#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 198574#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 199476#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 197562#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 197563#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 198670#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 199324#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 199475#L2083 assume !(0 != timeShift_~tmp___9~2#1); 199052#L2174 assume !(1 == ~doorState~0); 199053#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 199234#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 199069#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 197703#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 198358#L2182 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 198359#L1956 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 199371#getReverseHeading_returnLabel#1 timeShift_#t~ret59#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 199474#L1525-1 assume !(1 == stopRequestedInDirection_~dir#1); 197348#L1694-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 197328#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 198932#L2191 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 198495#L1901-2 assume !(1 == ~currentHeading~0); 198497#L1911-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 198613#L1911-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 199054#L1917-5 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 197972#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 204548#getCurrentFloorID_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 204543#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 204540#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 204539#L2964 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~7#1;havoc areDoorsOpen_~retValue_acc~7#1;areDoorsOpen_~retValue_acc~7#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~7#1; 204137#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret113#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~7#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~8#1 := __utac_acc__Specification9_spec__3_#t~ret113#1;havoc __utac_acc__Specification9_spec__3_#t~ret113#1; 204140#L2974 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~8#1); 204131#L2974-1 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 204129#timeShift_returnLabel#1 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 204126#L879-2 [2024-10-31 22:00:52,394 INFO L747 eck$LassoCheckResult]: Loop: 204126#L879-2 assume !false; 204124#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 204122#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 204120#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 204118#L887 assume 1 != cleanup_~tmp___0~0#1; 204116#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 204114#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 204112#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 204108#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 204106#L1433 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 204107#L152-22 assume !(0 == isFloorCalling_~floorID#1); 205325#L156-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 199202#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret20#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret20#1;havoc anyStopRequested_#t~ret20#1; 199203#L1440 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 197809#anyStopRequested_returnLabel#1 isIdle_#t~ret24#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 201472#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 201469#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 201470#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 201465#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 201463#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 201461#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 201460#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 201458#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 201457#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 201455#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 199326#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 199252#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 197824#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 197825#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 198219#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 205339#L2182-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 201406#L1956-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 205337#getReverseHeading_returnLabel#3 timeShift_#t~ret59#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 205335#L1525-3 assume !(1 == stopRequestedInDirection_~dir#1); 205236#L1694-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 202820#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 202818#L2191-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 202819#L1901-5 assume !(1 == ~currentHeading~0); 204831#L1911-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 204829#L1911-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 204574#L1917-11 havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 204573#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 204572#getCurrentFloorID_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 204570#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 204564#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 204563#L2964-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~7#1;havoc areDoorsOpen_~retValue_acc~7#1;areDoorsOpen_~retValue_acc~7#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~7#1; 204556#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret113#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~7#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~8#1 := __utac_acc__Specification9_spec__3_#t~ret113#1;havoc __utac_acc__Specification9_spec__3_#t~ret113#1; 204559#L2974-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~8#1); 204549#L2974-3 havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :end_inline___utac_acc__Specification9_spec__3 } true; 204128#timeShift_returnLabel#2 havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 204126#L879-2 [2024-10-31 22:00:52,395 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:00:52,395 INFO L85 PathProgramCache]: Analyzing trace with hash -1354457946, now seen corresponding path program 1 times [2024-10-31 22:00:52,395 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:00:52,396 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1989133246] [2024-10-31 22:00:52,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:00:52,396 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:00:52,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:00:52,482 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:00:52,483 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:00:52,483 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1989133246] [2024-10-31 22:00:52,483 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1989133246] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:00:52,483 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:00:52,483 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:00:52,483 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1094640630] [2024-10-31 22:00:52,484 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:00:52,484 INFO L750 eck$LassoCheckResult]: stem already infeasible