./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec2_product09.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version a0165632 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec2_product09.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4cb164e6307f0ddcae5850d7f4578967441d1456f6ed5a5be472ba090758b873 --- Real Ultimate output --- This is Ultimate 0.2.5-dev-a016563 [2024-11-08 16:31:38,705 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-08 16:31:38,803 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-08 16:31:38,809 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-08 16:31:38,810 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-08 16:31:38,854 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-08 16:31:38,857 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-08 16:31:38,857 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-08 16:31:38,858 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-08 16:31:38,858 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-08 16:31:38,859 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-08 16:31:38,859 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-08 16:31:38,860 INFO L153 SettingsManager]: * Use SBE=true [2024-11-08 16:31:38,860 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-08 16:31:38,862 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-08 16:31:38,862 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-08 16:31:38,864 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-08 16:31:38,869 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-08 16:31:38,869 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-08 16:31:38,870 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-08 16:31:38,870 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-08 16:31:38,870 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-08 16:31:38,871 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-08 16:31:38,871 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-08 16:31:38,871 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-08 16:31:38,872 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-08 16:31:38,872 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-08 16:31:38,872 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-08 16:31:38,873 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-08 16:31:38,873 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-08 16:31:38,873 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-08 16:31:38,877 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-08 16:31:38,877 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-08 16:31:38,878 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-08 16:31:38,878 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-08 16:31:38,878 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-08 16:31:38,879 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-08 16:31:38,879 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-08 16:31:38,879 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-08 16:31:38,880 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4cb164e6307f0ddcae5850d7f4578967441d1456f6ed5a5be472ba090758b873 [2024-11-08 16:31:39,168 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-08 16:31:39,194 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-08 16:31:39,197 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-08 16:31:39,198 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-08 16:31:39,198 INFO L274 PluginConnector]: CDTParser initialized [2024-11-08 16:31:39,200 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/../../sv-benchmarks/c/product-lines/elevator_spec2_product09.cil.c Unable to find full path for "g++" [2024-11-08 16:31:41,343 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-08 16:31:41,667 INFO L384 CDTParser]: Found 1 translation units. [2024-11-08 16:31:41,668 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/sv-benchmarks/c/product-lines/elevator_spec2_product09.cil.c [2024-11-08 16:31:41,688 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/data/8bdd2dfe9/e63eb833ba7a43f78959491a78d62dcf/FLAG1fcfe81d5 [2024-11-08 16:31:41,934 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/data/8bdd2dfe9/e63eb833ba7a43f78959491a78d62dcf [2024-11-08 16:31:41,937 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-08 16:31:41,938 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-08 16:31:41,940 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-08 16:31:41,941 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-08 16:31:41,948 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-08 16:31:41,949 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.11 04:31:41" (1/1) ... [2024-11-08 16:31:41,950 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@15e7a47d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:41, skipping insertion in model container [2024-11-08 16:31:41,951 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.11 04:31:41" (1/1) ... [2024-11-08 16:31:42,026 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-08 16:31:42,686 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-08 16:31:42,707 INFO L200 MainTranslator]: Completed pre-run [2024-11-08 16:31:42,719 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [48] [2024-11-08 16:31:42,721 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [412] [2024-11-08 16:31:42,721 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [532] [2024-11-08 16:31:42,722 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [716] [2024-11-08 16:31:42,722 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [1383] [2024-11-08 16:31:42,723 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1418] [2024-11-08 16:31:42,723 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1427] [2024-11-08 16:31:42,724 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [2869] [2024-11-08 16:31:42,724 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [3235] [2024-11-08 16:31:42,724 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [3247] [2024-11-08 16:31:42,938 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-08 16:31:42,986 INFO L204 MainTranslator]: Completed translation [2024-11-08 16:31:42,987 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42 WrapperNode [2024-11-08 16:31:42,987 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-08 16:31:42,989 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-08 16:31:42,989 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-08 16:31:42,989 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-08 16:31:42,998 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,024 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,201 INFO L138 Inliner]: procedures = 89, calls = 331, calls flagged for inlining = 184, calls inlined = 257, statements flattened = 8078 [2024-11-08 16:31:43,202 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-08 16:31:43,203 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-08 16:31:43,203 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-08 16:31:43,203 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-08 16:31:43,216 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,216 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,236 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,325 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-08 16:31:43,326 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,326 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,396 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,460 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,478 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,501 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,532 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-08 16:31:43,533 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-08 16:31:43,534 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-08 16:31:43,534 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-08 16:31:43,535 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (1/1) ... [2024-11-08 16:31:43,543 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-08 16:31:43,556 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/z3 [2024-11-08 16:31:43,583 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-08 16:31:43,589 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_895b7725-acf4-4054-b83d-b1547b7b4b9c/bin/uautomizer-verify-jihMAELWvX/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-08 16:31:43,677 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-08 16:31:43,677 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-08 16:31:43,677 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-08 16:31:43,679 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-08 16:31:43,680 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-08 16:31:43,680 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-08 16:31:43,680 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-08 16:31:43,681 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-08 16:31:43,681 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-08 16:31:43,681 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-08 16:31:43,681 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-08 16:31:43,681 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-08 16:31:43,681 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-08 16:31:43,682 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-08 16:31:43,682 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-08 16:31:43,682 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-08 16:31:43,683 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-08 16:31:43,683 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-08 16:31:43,683 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-08 16:31:43,683 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-08 16:31:43,683 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-08 16:31:43,683 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-08 16:31:43,684 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-08 16:31:43,905 INFO L238 CfgBuilder]: Building ICFG [2024-11-08 16:31:43,908 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-08 16:31:49,317 INFO L? ?]: Removed 3647 outVars from TransFormulas that were not future-live. [2024-11-08 16:31:49,317 INFO L287 CfgBuilder]: Performing block encoding [2024-11-08 16:31:49,388 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-08 16:31:49,389 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-11-08 16:31:49,389 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.11 04:31:49 BoogieIcfgContainer [2024-11-08 16:31:49,389 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-08 16:31:49,390 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-08 16:31:49,390 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-08 16:31:49,394 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-08 16:31:49,396 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-08 16:31:49,396 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 08.11 04:31:41" (1/3) ... [2024-11-08 16:31:49,397 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@67a02219 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 08.11 04:31:49, skipping insertion in model container [2024-11-08 16:31:49,398 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-08 16:31:49,398 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 04:31:42" (2/3) ... [2024-11-08 16:31:49,398 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@67a02219 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 08.11 04:31:49, skipping insertion in model container [2024-11-08 16:31:49,398 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-08 16:31:49,398 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.11 04:31:49" (3/3) ... [2024-11-08 16:31:49,401 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product09.cil.c [2024-11-08 16:31:49,548 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-08 16:31:49,548 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-08 16:31:49,548 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-08 16:31:49,549 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-08 16:31:49,549 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-08 16:31:49,549 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-08 16:31:49,549 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-08 16:31:49,549 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-08 16:31:49,563 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2392 states, 2391 states have (on average 1.8707653701380176) internal successors, (4473), 2391 states have internal predecessors, (4473), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:49,663 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1177 [2024-11-08 16:31:49,664 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:31:49,664 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:31:49,689 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:49,689 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:49,689 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-08 16:31:49,696 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2392 states, 2391 states have (on average 1.8707653701380176) internal successors, (4473), 2391 states have internal predecessors, (4473), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:49,728 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1177 [2024-11-08 16:31:49,729 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:31:49,729 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:31:49,733 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:49,734 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:49,745 INFO L745 eck$LassoCheckResult]: Stem: 161#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2301#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 940#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 546#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 687#valid_product_returnLabel#1true main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1874#L399true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1594#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 107#__utac_acc__Specification2_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1364#L458true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 173#getOrigin_returnLabel#1true bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1068#L1076true assume 0 == initPersonOnFloor_~floor#1; 780#L1077true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 144#L1184-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2122#L868true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2087#L880-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1030#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 418#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1609#L805true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 87#isFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1525#L2265true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 254#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1913#L2413true assume !(0 != timeShift_~tmp___9~2#1); 1904#L2504true assume !(1 == ~doorState~0); 1916#L2504-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 447#L1856true assume !(1 == stopRequestedInDirection_~dir#1); 1664#L2025true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1708#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 2091#L2512true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 2388#L2232true assume !(1 == ~currentHeading~0); 1046#L2242true assume !(0 == ~currentFloorID~0); 755#L2242-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1502#L2248-1true havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1430#L2521-2true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1115#getCurrentFloorID_returnLabel#1true __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 290#L595true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 2304#L596true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 731#areDoorsOpen_returnLabel#1true __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 106#L600true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 621#L655true havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2006#timeShift_returnLabel#1true havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2343#L198-2true [2024-11-08 16:31:49,746 INFO L747 eck$LassoCheckResult]: Loop: 2343#L198-2true assume !false; 1994#L199true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 524#L202true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 926#isBlocked_returnLabel#1true cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 620#L206true assume 1 != cleanup_~tmp___0~0#1; 2038#L206-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1786#L805-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1492#isFloorCalling_returnLabel#22true anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 1739#L1760true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 137#anyStopRequested_returnLabel#1true isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1166#isIdle_returnLabel#1true cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 799#L218true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1093#L805-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1177#isFloorCalling_returnLabel#27true stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 698#L2265-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2075#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 2255#L2413-2true assume !(0 != timeShift_~tmp___9~2#1); 1945#L2504-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1953#L2504-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2098#L1856-2true assume !(1 == stopRequestedInDirection_~dir#1); 2131#L2025-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1210#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1685#L2512-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 2242#L2232-3true assume !(1 == ~currentHeading~0); 2352#L2242-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1298#L2242-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 73#L2248-7true havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1265#L2521-5true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1420#getCurrentFloorID_returnLabel#2true __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1833#L595-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 853#L596-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1463#areDoorsOpen_returnLabel#6true __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 113#L600-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 796#L655-1true havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2039#timeShift_returnLabel#2true havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2343#L198-2true [2024-11-08 16:31:49,763 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:49,763 INFO L85 PathProgramCache]: Analyzing trace with hash 1870806649, now seen corresponding path program 1 times [2024-11-08 16:31:49,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:49,780 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [873113398] [2024-11-08 16:31:49,781 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:49,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:49,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:50,296 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:50,297 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:50,297 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [873113398] [2024-11-08 16:31:50,299 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [873113398] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:50,299 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:50,300 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:31:50,301 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1680436487] [2024-11-08 16:31:50,302 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:50,310 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:31:50,310 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:50,311 INFO L85 PathProgramCache]: Analyzing trace with hash 1243281288, now seen corresponding path program 1 times [2024-11-08 16:31:50,311 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:50,311 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [701372060] [2024-11-08 16:31:50,311 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:50,313 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:50,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:50,458 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:50,460 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:50,460 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [701372060] [2024-11-08 16:31:50,460 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [701372060] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:50,461 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:50,461 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-08 16:31:50,461 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1813942576] [2024-11-08 16:31:50,461 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:50,462 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:31:50,464 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:31:50,506 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-08 16:31:50,506 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-08 16:31:50,515 INFO L87 Difference]: Start difference. First operand has 2392 states, 2391 states have (on average 1.8707653701380176) internal successors, (4473), 2391 states have internal predecessors, (4473), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:50,836 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:31:50,836 INFO L93 Difference]: Finished difference Result 2386 states and 4459 transitions. [2024-11-08 16:31:50,838 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 2386 states and 4459 transitions. [2024-11-08 16:31:50,867 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1179 [2024-11-08 16:31:50,893 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 2386 states to 2368 states and 4439 transitions. [2024-11-08 16:31:50,895 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 2368 [2024-11-08 16:31:50,902 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 2368 [2024-11-08 16:31:50,904 INFO L73 IsDeterministic]: Start isDeterministic. Operand 2368 states and 4439 transitions. [2024-11-08 16:31:50,916 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:31:50,916 INFO L218 hiAutomatonCegarLoop]: Abstraction has 2368 states and 4439 transitions. [2024-11-08 16:31:50,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2368 states and 4439 transitions. [2024-11-08 16:31:51,070 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2368 to 2368. [2024-11-08 16:31:51,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2368 states, 2368 states have (on average 1.8745777027027026) internal successors, (4439), 2367 states have internal predecessors, (4439), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:51,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2368 states to 2368 states and 4439 transitions. [2024-11-08 16:31:51,087 INFO L240 hiAutomatonCegarLoop]: Abstraction has 2368 states and 4439 transitions. [2024-11-08 16:31:51,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-08 16:31:51,098 INFO L425 stractBuchiCegarLoop]: Abstraction has 2368 states and 4439 transitions. [2024-11-08 16:31:51,099 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-08 16:31:51,099 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2368 states and 4439 transitions. [2024-11-08 16:31:51,121 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1179 [2024-11-08 16:31:51,121 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:31:51,121 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:31:51,125 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:51,127 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:51,128 INFO L745 eck$LassoCheckResult]: Stem: 5164#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5165#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6380#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5866#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 5867#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6071#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6919#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 5058#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 5059#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 5191#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5192#L1076 assume 0 == initPersonOnFloor_~floor#1; 6187#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5132#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5133#L868 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5296#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 6479#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 5661#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5662#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4920#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 5008#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6423#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6424#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 5957#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5958#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 7158#L2413 assume !(0 != timeShift_~tmp___9~2#1); 7073#L2504 assume !(1 == ~doorState~0); 7074#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5711#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 5712#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 4947#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 6980#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 7126#L2232 assume !(1 == ~currentHeading~0); 6493#L2242 assume !(0 == ~currentFloorID~0); 6156#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6157#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 6643#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6564#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 5428#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 5429#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 6128#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 5055#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 5056#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 5982#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 7106#L198-2 [2024-11-08 16:31:51,128 INFO L747 eck$LassoCheckResult]: Loop: 7106#L198-2 assume !false; 7100#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 5836#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 5837#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 5980#L206 assume 1 != cleanup_~tmp___0~0#1; 5981#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 7018#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5255#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 6854#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 5037#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 5116#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6205#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 6206#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 6543#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 6085#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6087#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 5618#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 5930#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 6573#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 7157#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 7085#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 7086#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 7088#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 7128#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 4999#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 6644#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 6974#L2232-3 assume !(1 == ~currentHeading~0); 7148#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6704#L2242-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4974#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 4843#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6686#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 6796#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 6275#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 6276#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 5067#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 4929#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 6200#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 7106#L198-2 [2024-11-08 16:31:51,129 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:51,129 INFO L85 PathProgramCache]: Analyzing trace with hash 236095066, now seen corresponding path program 1 times [2024-11-08 16:31:51,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:51,130 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [402440560] [2024-11-08 16:31:51,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:51,130 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:51,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:51,317 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:51,320 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:51,320 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [402440560] [2024-11-08 16:31:51,320 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [402440560] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:51,320 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:51,321 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:31:51,321 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2083119020] [2024-11-08 16:31:51,321 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:51,321 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:31:51,322 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:51,322 INFO L85 PathProgramCache]: Analyzing trace with hash -1964037782, now seen corresponding path program 1 times [2024-11-08 16:31:51,325 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:51,326 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1525503808] [2024-11-08 16:31:51,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:51,326 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:51,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:51,467 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:51,468 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:51,468 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1525503808] [2024-11-08 16:31:51,469 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1525503808] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:51,469 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:51,470 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:31:51,470 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1858822913] [2024-11-08 16:31:51,470 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:51,471 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:31:51,472 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:31:51,472 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-08 16:31:51,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-08 16:31:51,474 INFO L87 Difference]: Start difference. First operand 2368 states and 4439 transitions. cyclomatic complexity: 2072 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:53,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:31:53,391 INFO L93 Difference]: Finished difference Result 4778 states and 8875 transitions. [2024-11-08 16:31:53,391 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4778 states and 8875 transitions. [2024-11-08 16:31:53,435 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2413 [2024-11-08 16:31:53,472 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4778 states to 4778 states and 8875 transitions. [2024-11-08 16:31:53,472 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4778 [2024-11-08 16:31:53,481 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4778 [2024-11-08 16:31:53,481 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4778 states and 8875 transitions. [2024-11-08 16:31:53,492 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:31:53,493 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4778 states and 8875 transitions. [2024-11-08 16:31:53,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4778 states and 8875 transitions. [2024-11-08 16:31:53,610 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4778 to 4688. [2024-11-08 16:31:53,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4688 states, 4688 states have (on average 1.8739334470989761) internal successors, (8785), 4687 states have internal predecessors, (8785), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:53,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4688 states to 4688 states and 8785 transitions. [2024-11-08 16:31:53,647 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4688 states and 8785 transitions. [2024-11-08 16:31:53,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-08 16:31:53,649 INFO L425 stractBuchiCegarLoop]: Abstraction has 4688 states and 8785 transitions. [2024-11-08 16:31:53,649 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-08 16:31:53,649 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4688 states and 8785 transitions. [2024-11-08 16:31:53,682 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2364 [2024-11-08 16:31:53,682 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:31:53,683 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:31:53,685 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:53,685 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:53,686 INFO L745 eck$LassoCheckResult]: Stem: 12328#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 12329#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 13593#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 13046#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 13047#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 13268#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 14173#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 12223#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 12224#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 12355#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 12356#L1076 assume 0 == initPersonOnFloor_~floor#1; 13388#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 12296#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 12297#L868 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 14457#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 16144#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 16143#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 16141#L805 assume !(0 == isFloorCalling_~floorID#1); 16142#L809 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 15749#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 15748#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 13638#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 13639#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 13143#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 13145#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 14526#L2413 assume !(0 != timeShift_~tmp___9~2#1); 14365#L2504 assume !(1 == ~doorState~0); 14366#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 12884#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 12885#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 12110#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 14250#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 14446#L2232 assume !(1 == ~currentHeading~0); 13713#L2242 assume !(0 == ~currentFloorID~0); 13356#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 13357#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 13874#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 13787#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 12592#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 12593#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 14508#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 14564#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 14554#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 14410#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 14411#L198-2 [2024-11-08 16:31:53,686 INFO L747 eck$LassoCheckResult]: Loop: 14411#L198-2 assume !false; 14515#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 13014#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 13015#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 13168#L206 assume 1 != cleanup_~tmp___0~0#1; 13169#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 14293#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 14100#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 14101#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 12201#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 12280#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 13841#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 14528#L805-26 assume !(0 == isFloorCalling_~floorID#1); 14529#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 14977#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 14976#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 14974#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 14970#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 14969#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 14968#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 14966#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 14965#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 14964#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 14448#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 14449#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 14639#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 14637#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 14635#L2232-3 assume !(1 == ~currentHeading~0); 14634#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 14632#L2242-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 14574#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 14573#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 14572#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 14328#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 13478#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 13479#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 12231#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 12093#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 14427#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 14411#L198-2 [2024-11-08 16:31:53,687 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:53,688 INFO L85 PathProgramCache]: Analyzing trace with hash 1284691731, now seen corresponding path program 1 times [2024-11-08 16:31:53,688 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:53,688 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1496951565] [2024-11-08 16:31:53,688 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:53,689 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:53,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:53,779 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:53,779 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:53,780 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1496951565] [2024-11-08 16:31:53,780 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1496951565] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:53,780 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:53,780 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:31:53,781 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [520897451] [2024-11-08 16:31:53,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:53,781 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:31:53,782 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:53,782 INFO L85 PathProgramCache]: Analyzing trace with hash 1662357602, now seen corresponding path program 1 times [2024-11-08 16:31:53,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:53,782 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1902405317] [2024-11-08 16:31:53,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:53,783 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:53,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:53,896 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:53,896 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:53,896 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1902405317] [2024-11-08 16:31:53,897 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1902405317] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:53,897 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:53,897 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:31:53,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [331452632] [2024-11-08 16:31:53,898 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:53,898 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:31:53,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:31:53,899 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-08 16:31:53,899 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-08 16:31:53,899 INFO L87 Difference]: Start difference. First operand 4688 states and 8785 transitions. cyclomatic complexity: 4098 Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:56,199 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:31:56,200 INFO L93 Difference]: Finished difference Result 8432 states and 15778 transitions. [2024-11-08 16:31:56,200 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 8432 states and 15778 transitions. [2024-11-08 16:31:56,249 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4288 [2024-11-08 16:31:56,293 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 8432 states to 8432 states and 15778 transitions. [2024-11-08 16:31:56,294 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 8432 [2024-11-08 16:31:56,305 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 8432 [2024-11-08 16:31:56,306 INFO L73 IsDeterministic]: Start isDeterministic. Operand 8432 states and 15778 transitions. [2024-11-08 16:31:56,319 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:31:56,319 INFO L218 hiAutomatonCegarLoop]: Abstraction has 8432 states and 15778 transitions. [2024-11-08 16:31:56,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8432 states and 15778 transitions. [2024-11-08 16:31:56,448 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8432 to 8414. [2024-11-08 16:31:56,468 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8414 states, 8414 states have (on average 1.8716425005942476) internal successors, (15748), 8413 states have internal predecessors, (15748), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:56,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8414 states to 8414 states and 15748 transitions. [2024-11-08 16:31:56,503 INFO L240 hiAutomatonCegarLoop]: Abstraction has 8414 states and 15748 transitions. [2024-11-08 16:31:56,504 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-08 16:31:56,504 INFO L425 stractBuchiCegarLoop]: Abstraction has 8414 states and 15748 transitions. [2024-11-08 16:31:56,504 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-08 16:31:56,505 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8414 states and 15748 transitions. [2024-11-08 16:31:56,545 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4279 [2024-11-08 16:31:56,545 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:31:56,545 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:31:56,548 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:56,549 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:56,549 INFO L745 eck$LassoCheckResult]: Stem: 25468#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 25469#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 26716#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 26183#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 26184#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 26397#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 27318#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 25361#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 25362#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 25496#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 25497#L1076 assume 0 == initPersonOnFloor_~floor#1; 26513#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 25436#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 25437#L868 assume !(0 == callOnFloor_~floorID#1); 27581#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 25601#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 27572#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 25973#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 25974#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 27652#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 27651#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 27650#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 26848#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 26278#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 26279#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 33506#L2413 assume !(0 != timeShift_~tmp___9~2#1); 27494#L2504 assume !(1 == ~doorState~0); 27495#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 26024#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 26025#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 33180#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 33331#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 27645#L2232 assume !(1 == ~currentHeading~0); 27646#L2242 assume !(0 == ~currentFloorID~0); 26484#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 26485#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 27777#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 27771#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 27761#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 27756#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 27753#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 27732#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 27712#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 27710#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 27708#L198-2 [2024-11-08 16:31:56,550 INFO L747 eck$LassoCheckResult]: Loop: 27708#L198-2 assume !false; 27707#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 27706#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 27705#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 27704#L206 assume 1 != cleanup_~tmp___0~0#1; 27703#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 27694#L805-21 assume !(0 == isFloorCalling_~floorID#1); 27683#L809-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 27674#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 27660#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 27659#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 27658#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 27657#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 27656#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 27655#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 27654#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 27653#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 25930#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 26251#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 26922#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 33052#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 27514#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 27515#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 33169#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 33138#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 33127#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 33126#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 27619#L2232-3 assume !(1 == ~currentHeading~0); 27620#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 27073#L2242-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 27074#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 27745#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 27744#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 27743#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 27741#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 27742#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 27719#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 27711#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 27709#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 27708#L198-2 [2024-11-08 16:31:56,550 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:56,551 INFO L85 PathProgramCache]: Analyzing trace with hash 215036937, now seen corresponding path program 1 times [2024-11-08 16:31:56,551 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:56,552 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1137318654] [2024-11-08 16:31:56,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:56,553 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:56,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:56,672 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:56,672 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:56,672 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1137318654] [2024-11-08 16:31:56,672 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1137318654] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:56,672 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:56,673 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:31:56,673 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1349855224] [2024-11-08 16:31:56,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:56,673 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:31:56,674 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:56,674 INFO L85 PathProgramCache]: Analyzing trace with hash 1812451412, now seen corresponding path program 1 times [2024-11-08 16:31:56,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:56,674 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1355755304] [2024-11-08 16:31:56,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:56,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:56,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:56,716 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:56,717 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:56,718 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1355755304] [2024-11-08 16:31:56,718 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1355755304] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:56,718 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:56,718 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:31:56,718 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [711885758] [2024-11-08 16:31:56,718 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:56,719 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:31:56,719 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:31:56,719 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-08 16:31:56,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-08 16:31:56,720 INFO L87 Difference]: Start difference. First operand 8414 states and 15748 transitions. cyclomatic complexity: 7335 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:57,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:31:57,396 INFO L93 Difference]: Finished difference Result 8260 states and 15432 transitions. [2024-11-08 16:31:57,396 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 8260 states and 15432 transitions. [2024-11-08 16:31:57,448 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4157 [2024-11-08 16:31:57,493 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 8260 states to 8260 states and 15432 transitions. [2024-11-08 16:31:57,494 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 8260 [2024-11-08 16:31:57,503 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 8260 [2024-11-08 16:31:57,503 INFO L73 IsDeterministic]: Start isDeterministic. Operand 8260 states and 15432 transitions. [2024-11-08 16:31:57,516 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:31:57,517 INFO L218 hiAutomatonCegarLoop]: Abstraction has 8260 states and 15432 transitions. [2024-11-08 16:31:57,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8260 states and 15432 transitions. [2024-11-08 16:31:57,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8260 to 8260. [2024-11-08 16:31:57,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8260 states, 8260 states have (on average 1.8682808716707022) internal successors, (15432), 8259 states have internal predecessors, (15432), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:57,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8260 states to 8260 states and 15432 transitions. [2024-11-08 16:31:57,656 INFO L240 hiAutomatonCegarLoop]: Abstraction has 8260 states and 15432 transitions. [2024-11-08 16:31:57,656 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-08 16:31:57,657 INFO L425 stractBuchiCegarLoop]: Abstraction has 8260 states and 15432 transitions. [2024-11-08 16:31:57,657 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-08 16:31:57,658 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8260 states and 15432 transitions. [2024-11-08 16:31:57,693 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4157 [2024-11-08 16:31:57,693 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:31:57,693 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:31:57,696 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:57,696 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:57,696 INFO L745 eck$LassoCheckResult]: Stem: 42149#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 42150#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 43356#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 42841#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 42842#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 43050#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 43919#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 42042#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 42043#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 42176#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 42177#L1076 assume 0 == initPersonOnFloor_~floor#1; 43167#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 42117#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 42118#L868 assume !(0 == callOnFloor_~floorID#1); 44150#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 42278#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 44352#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 44351#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 44350#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 44349#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 44348#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 44345#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 44341#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 44339#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 44338#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 44335#L2413 assume !(0 != timeShift_~tmp___9~2#1); 44332#L2504 assume !(1 == ~doorState~0); 44329#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 44296#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 44281#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 44266#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 44240#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 44241#L2232 assume !(1 == ~currentHeading~0); 44881#L2242 assume !(0 == ~currentFloorID~0); 44876#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 44814#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 44812#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 44811#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 44576#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 44574#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 44575#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 44520#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 44498#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 44494#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 44491#L198-2 [2024-11-08 16:31:57,697 INFO L747 eck$LassoCheckResult]: Loop: 44491#L198-2 assume !false; 44489#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 44487#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 44485#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 44483#L206 assume 1 != cleanup_~tmp___0~0#1; 44481#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 44471#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 44459#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 44353#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 44355#L1764 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 44447#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 44446#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 44445#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 44443#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 44442#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 44441#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 44439#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 44435#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 44433#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 44415#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 44413#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 44412#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 44411#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 44388#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 44373#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 44362#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 44360#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 44358#L2232-3 assume !(1 == ~currentHeading~0); 44356#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 44357#L2242-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 44556#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 44555#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 44554#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 44553#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 44551#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 44552#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 44507#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 44497#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 44493#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 44491#L198-2 [2024-11-08 16:31:57,697 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:57,698 INFO L85 PathProgramCache]: Analyzing trace with hash 215036937, now seen corresponding path program 2 times [2024-11-08 16:31:57,698 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:57,698 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [326119410] [2024-11-08 16:31:57,698 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:57,699 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:57,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:57,782 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:57,782 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:57,782 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [326119410] [2024-11-08 16:31:57,783 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [326119410] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:57,783 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:57,783 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:31:57,783 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [19292007] [2024-11-08 16:31:57,783 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:57,783 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:31:57,784 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:57,784 INFO L85 PathProgramCache]: Analyzing trace with hash -136816321, now seen corresponding path program 1 times [2024-11-08 16:31:57,784 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:57,785 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1165361205] [2024-11-08 16:31:57,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:57,785 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:57,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:57,923 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:57,924 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:57,924 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1165361205] [2024-11-08 16:31:57,924 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1165361205] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:57,924 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:57,925 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 16:31:57,925 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [602813076] [2024-11-08 16:31:57,925 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:57,926 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:31:57,926 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:31:57,926 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-08 16:31:57,927 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-08 16:31:57,927 INFO L87 Difference]: Start difference. First operand 8260 states and 15432 transitions. cyclomatic complexity: 7173 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:58,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:31:58,337 INFO L93 Difference]: Finished difference Result 14983 states and 27992 transitions. [2024-11-08 16:31:58,337 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14983 states and 27992 transitions. [2024-11-08 16:31:58,444 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2024-11-08 16:31:58,528 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14983 states to 14983 states and 27992 transitions. [2024-11-08 16:31:58,529 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14983 [2024-11-08 16:31:58,551 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14983 [2024-11-08 16:31:58,551 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14983 states and 27992 transitions. [2024-11-08 16:31:58,573 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:31:58,573 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14983 states and 27992 transitions. [2024-11-08 16:31:58,593 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14983 states and 27992 transitions. [2024-11-08 16:31:58,882 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14983 to 14983. [2024-11-08 16:31:58,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14983 states, 14983 states have (on average 1.8682506841086566) internal successors, (27992), 14982 states have internal predecessors, (27992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:31:58,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14983 states to 14983 states and 27992 transitions. [2024-11-08 16:31:58,952 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14983 states and 27992 transitions. [2024-11-08 16:31:58,953 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-08 16:31:58,953 INFO L425 stractBuchiCegarLoop]: Abstraction has 14983 states and 27992 transitions. [2024-11-08 16:31:58,953 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-08 16:31:58,954 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14983 states and 27992 transitions. [2024-11-08 16:31:59,011 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2024-11-08 16:31:59,012 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:31:59,012 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:31:59,017 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:59,017 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:31:59,017 INFO L745 eck$LassoCheckResult]: Stem: 65404#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 65405#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 66620#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 66097#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 66098#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 66307#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 67180#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 65297#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 65298#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 65432#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 65433#L1076 assume 0 == initPersonOnFloor_~floor#1; 66424#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 65372#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 65373#L868 assume !(0 == callOnFloor_~floorID#1); 67424#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 65534#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 70178#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 70177#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 70175#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 70176#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 78078#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 69722#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 68632#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 68626#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 68624#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 68623#L2413 assume !(0 != timeShift_~tmp___9~2#1); 68622#L2504 assume !(1 == ~doorState~0); 68621#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 68617#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 68219#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 68205#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 68201#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 68199#L2232 assume !(1 == ~currentHeading~0); 68083#L2242 assume !(0 == ~currentFloorID~0); 68080#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 68061#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 68059#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 67568#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 67566#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 67565#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 67561#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 67525#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 67517#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 67499#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 67498#L198-2 [2024-11-08 16:31:59,018 INFO L747 eck$LassoCheckResult]: Loop: 67498#L198-2 assume !false; 67493#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 67494#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 67489#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 67490#L206 assume 1 != cleanup_~tmp___0~0#1; 67485#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 67486#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 67481#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 67482#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 67475#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 67477#L805-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 68002#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 67997#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 67989#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 67987#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 67985#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 67984#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 67979#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 67978#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 67761#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 67756#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 67752#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 67751#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 67748#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 67747#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 67745#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 67743#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 67619#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 67605#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 67595#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 67587#L2232-3 assume !(1 == ~currentHeading~0); 67578#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 67574#L2242-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 67569#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 67570#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 68041#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 68040#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 68038#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 68039#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 67511#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 67505#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 67497#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 67498#L198-2 [2024-11-08 16:31:59,019 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:59,019 INFO L85 PathProgramCache]: Analyzing trace with hash 215036937, now seen corresponding path program 3 times [2024-11-08 16:31:59,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:59,019 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1688826501] [2024-11-08 16:31:59,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:59,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:59,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:59,226 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:59,226 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:59,226 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1688826501] [2024-11-08 16:31:59,226 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1688826501] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:59,227 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:59,227 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:31:59,227 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [753119641] [2024-11-08 16:31:59,227 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:59,227 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:31:59,228 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:31:59,228 INFO L85 PathProgramCache]: Analyzing trace with hash -161855230, now seen corresponding path program 1 times [2024-11-08 16:31:59,228 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:31:59,228 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1106130270] [2024-11-08 16:31:59,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:31:59,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:31:59,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:31:59,275 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:31:59,276 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:31:59,276 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1106130270] [2024-11-08 16:31:59,276 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1106130270] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:31:59,276 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:31:59,277 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:31:59,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1521358781] [2024-11-08 16:31:59,277 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:31:59,277 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:31:59,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:31:59,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-08 16:31:59,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-08 16:31:59,278 INFO L87 Difference]: Start difference. First operand 14983 states and 27992 transitions. cyclomatic complexity: 13010 Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:00,010 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:00,010 INFO L93 Difference]: Finished difference Result 14983 states and 27848 transitions. [2024-11-08 16:32:00,010 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14983 states and 27848 transitions. [2024-11-08 16:32:00,086 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2024-11-08 16:32:00,150 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14983 states to 14983 states and 27848 transitions. [2024-11-08 16:32:00,151 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14983 [2024-11-08 16:32:00,178 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14983 [2024-11-08 16:32:00,178 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14983 states and 27848 transitions. [2024-11-08 16:32:00,299 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:00,299 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14983 states and 27848 transitions. [2024-11-08 16:32:00,315 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14983 states and 27848 transitions. [2024-11-08 16:32:00,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14983 to 14983. [2024-11-08 16:32:00,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14983 states, 14983 states have (on average 1.8586397917639992) internal successors, (27848), 14982 states have internal predecessors, (27848), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:00,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14983 states to 14983 states and 27848 transitions. [2024-11-08 16:32:00,537 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14983 states and 27848 transitions. [2024-11-08 16:32:00,538 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-08 16:32:00,540 INFO L425 stractBuchiCegarLoop]: Abstraction has 14983 states and 27848 transitions. [2024-11-08 16:32:00,540 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-08 16:32:00,541 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14983 states and 27848 transitions. [2024-11-08 16:32:00,728 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2024-11-08 16:32:00,731 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:00,734 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:00,746 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:00,749 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:00,750 INFO L745 eck$LassoCheckResult]: Stem: 95374#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 95375#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 96596#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 96065#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 96066#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 96282#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 97164#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 95268#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 95269#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 95402#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 95403#L1076 assume 0 == initPersonOnFloor_~floor#1; 96401#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 95342#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 95343#L868 assume !(0 == callOnFloor_~floorID#1); 97409#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 95503#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 99778#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 99777#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 99775#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 99774#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 99773#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 99771#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 99767#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 99765#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 99764#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 99763#L2413 assume !(0 != timeShift_~tmp___9~2#1); 99758#L2504 assume !(1 == ~doorState~0); 99756#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 99755#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 99739#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 99725#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 99722#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 99723#L2232 assume !(1 == ~currentHeading~0); 107571#L2242 assume !(0 == ~currentFloorID~0); 99625#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 98429#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 97936#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 97935#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 97934#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 97933#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 97932#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 97497#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 97476#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 97477#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 97909#L198-2 [2024-11-08 16:32:00,751 INFO L747 eck$LassoCheckResult]: Loop: 97909#L198-2 assume !false; 97908#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 97907#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 97906#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 97905#L206 assume 1 != cleanup_~tmp___0~0#1; 97904#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 97903#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 97902#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 97900#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 97898#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 95626#L805-22 assume !(0 == isFloorCalling_~floorID#1); 95185#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 95187#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 97141#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 95247#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 97765#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 97763#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 97757#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 97755#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 97751#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 97747#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 97740#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 97738#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 97735#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 97734#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 97732#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 97730#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 97724#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 97590#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 97576#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 97566#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 97558#L2232-3 assume !(1 == ~currentHeading~0); 97549#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 97545#L2242-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 97540#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 97541#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 97976#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 97975#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 97974#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 97509#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 97510#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 97968#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 97910#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 97909#L198-2 [2024-11-08 16:32:00,752 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:00,755 INFO L85 PathProgramCache]: Analyzing trace with hash 215036937, now seen corresponding path program 4 times [2024-11-08 16:32:00,756 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:00,756 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112741120] [2024-11-08 16:32:00,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:00,756 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:00,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:00,971 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:00,971 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:00,972 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112741120] [2024-11-08 16:32:00,972 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112741120] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:00,972 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:00,972 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:32:00,976 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [87413157] [2024-11-08 16:32:00,976 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:00,976 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:00,977 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:00,977 INFO L85 PathProgramCache]: Analyzing trace with hash -2030734921, now seen corresponding path program 1 times [2024-11-08 16:32:00,977 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:00,977 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1712551825] [2024-11-08 16:32:00,978 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:00,978 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:01,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:01,158 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:01,160 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:01,161 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1712551825] [2024-11-08 16:32:01,161 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1712551825] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:01,161 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:01,161 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 16:32:01,162 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1009276327] [2024-11-08 16:32:01,162 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:01,162 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:01,162 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:01,167 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 16:32:01,167 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 16:32:01,167 INFO L87 Difference]: Start difference. First operand 14983 states and 27848 transitions. cyclomatic complexity: 12866 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:01,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:01,543 INFO L93 Difference]: Finished difference Result 15012 states and 27877 transitions. [2024-11-08 16:32:01,543 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15012 states and 27877 transitions. [2024-11-08 16:32:01,757 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8270 [2024-11-08 16:32:01,864 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15012 states to 15012 states and 27877 transitions. [2024-11-08 16:32:01,865 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15012 [2024-11-08 16:32:01,886 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15012 [2024-11-08 16:32:01,887 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15012 states and 27877 transitions. [2024-11-08 16:32:01,898 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:01,899 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15012 states and 27877 transitions. [2024-11-08 16:32:01,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15012 states and 27877 transitions. [2024-11-08 16:32:02,116 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15012 to 15001. [2024-11-08 16:32:02,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15001 states, 15001 states have (on average 1.8576094927004867) internal successors, (27866), 15000 states have internal predecessors, (27866), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:02,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15001 states to 15001 states and 27866 transitions. [2024-11-08 16:32:02,171 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15001 states and 27866 transitions. [2024-11-08 16:32:02,171 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-08 16:32:02,173 INFO L425 stractBuchiCegarLoop]: Abstraction has 15001 states and 27866 transitions. [2024-11-08 16:32:02,173 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-08 16:32:02,173 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15001 states and 27866 transitions. [2024-11-08 16:32:02,219 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8264 [2024-11-08 16:32:02,220 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:02,220 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:02,225 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:02,225 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:02,225 INFO L745 eck$LassoCheckResult]: Stem: 125378#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 125379#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 126608#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 126074#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 126075#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 126286#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 127204#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 125273#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 125274#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 125406#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 125407#L1076 assume 0 == initPersonOnFloor_~floor#1; 126404#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 125346#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 125347#L868 assume !(0 == callOnFloor_~floorID#1); 127467#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 125507#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 135187#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 135054#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 135053#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 135052#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 135051#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 135049#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 135045#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 135043#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 135042#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 135040#L2413 assume !(0 != timeShift_~tmp___9~2#1); 135039#L2504 assume !(1 == ~doorState~0); 135038#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 135036#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 135037#L2025 assume !(0 == ~currentFloorID~0); 127248#L2031 assume !(~currentFloorID~0 > 0); 135279#$Ultimate##2182 assume ~currentFloorID~0 > 0; 135307#L2048 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 135305#L2049 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 135306#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 139764#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 127530#L2232 assume !(1 == ~currentHeading~0); 127531#L2242 assume !(0 == ~currentFloorID~0); 139554#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 127142#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 127143#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 139913#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 139911#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 139907#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 139906#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 139901#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 139881#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 139879#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 139877#L198-2 [2024-11-08 16:32:02,226 INFO L747 eck$LassoCheckResult]: Loop: 139877#L198-2 assume !false; 139876#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 139871#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 139869#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 139868#L206 assume 1 != cleanup_~tmp___0~0#1; 139867#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 139866#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 139471#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 139134#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 139135#L1764 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 127895#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 139473#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 139472#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 139123#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 139124#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 139458#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 139459#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 139467#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 139463#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 139461#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 139462#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 139470#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 139469#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 127400#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 127401#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 127461#L2025-2 assume !(0 == ~currentFloorID~0); 139392#L2031-2 assume !(~currentFloorID~0 > 0); 127090#$Ultimate##4722 assume ~currentFloorID~0 > 0; 139579#L2048-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 125697#L2049-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 125216#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 139476#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 127501#L2232-3 assume !(1 == ~currentHeading~0); 127502#L2242-9 assume !(0 == ~currentFloorID~0); 126956#L2242-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 125188#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 125061#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 139912#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 139910#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 139908#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 139909#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 139888#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 139880#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 139878#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 139877#L198-2 [2024-11-08 16:32:02,226 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:02,226 INFO L85 PathProgramCache]: Analyzing trace with hash -928351246, now seen corresponding path program 1 times [2024-11-08 16:32:02,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:02,227 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1305627157] [2024-11-08 16:32:02,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:02,227 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:02,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:02,313 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:02,313 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:02,316 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1305627157] [2024-11-08 16:32:02,317 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1305627157] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:02,317 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:02,318 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:32:02,318 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1965291382] [2024-11-08 16:32:02,318 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:02,318 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:02,320 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:02,320 INFO L85 PathProgramCache]: Analyzing trace with hash -1871617848, now seen corresponding path program 1 times [2024-11-08 16:32:02,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:02,321 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [42125474] [2024-11-08 16:32:02,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:02,321 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:02,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:02,399 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:02,400 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:02,400 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [42125474] [2024-11-08 16:32:02,400 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [42125474] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:02,402 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:02,403 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 16:32:02,403 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1264365493] [2024-11-08 16:32:02,403 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:02,403 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:02,404 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:02,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-08 16:32:02,404 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-08 16:32:02,404 INFO L87 Difference]: Start difference. First operand 15001 states and 27866 transitions. cyclomatic complexity: 12866 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:03,576 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:03,576 INFO L93 Difference]: Finished difference Result 11400 states and 21053 transitions. [2024-11-08 16:32:03,576 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11400 states and 21053 transitions. [2024-11-08 16:32:03,631 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8317 [2024-11-08 16:32:03,676 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11400 states to 11400 states and 21053 transitions. [2024-11-08 16:32:03,676 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11400 [2024-11-08 16:32:03,687 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11400 [2024-11-08 16:32:03,687 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11400 states and 21053 transitions. [2024-11-08 16:32:03,697 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:03,697 INFO L218 hiAutomatonCegarLoop]: Abstraction has 11400 states and 21053 transitions. [2024-11-08 16:32:03,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11400 states and 21053 transitions. [2024-11-08 16:32:03,938 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11400 to 11391. [2024-11-08 16:32:03,955 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11391 states, 11391 states have (on average 1.846896672811869) internal successors, (21038), 11390 states have internal predecessors, (21038), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:03,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11391 states to 11391 states and 21038 transitions. [2024-11-08 16:32:03,992 INFO L240 hiAutomatonCegarLoop]: Abstraction has 11391 states and 21038 transitions. [2024-11-08 16:32:03,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-08 16:32:03,994 INFO L425 stractBuchiCegarLoop]: Abstraction has 11391 states and 21038 transitions. [2024-11-08 16:32:03,994 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-08 16:32:03,994 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11391 states and 21038 transitions. [2024-11-08 16:32:04,047 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8308 [2024-11-08 16:32:04,048 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:04,048 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:04,052 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:04,052 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:04,056 INFO L745 eck$LassoCheckResult]: Stem: 151774#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 151775#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 152928#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 152425#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 152426#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 152623#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 153485#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 151667#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 151668#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 151799#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 151800#L1076 assume 0 == initPersonOnFloor_~floor#1; 152741#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 151739#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 151740#L868 assume !(0 == callOnFloor_~floorID#1); 153745#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 151893#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 153802#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 153801#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 153800#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 153799#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 153798#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 152969#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 152970#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 152515#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 152516#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 153797#L2413 assume !(0 != timeShift_~tmp___9~2#1); 153662#L2504 assume !(1 == ~doorState~0); 153663#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 152282#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 152283#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 153106#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 153555#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 153649#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 153295#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 153296#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 153780#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 151431#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 153286#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 153517#L2232-2 assume !(1 == ~currentHeading~0); 152380#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 151464#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 151465#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 153424#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 153848#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 153847#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 153845#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 153840#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 153841#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 153817#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 153818#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 156382#L198-2 [2024-11-08 16:32:04,057 INFO L747 eck$LassoCheckResult]: Loop: 156382#L198-2 assume !false; 156379#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 156376#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 156373#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 156371#L206 assume 1 != cleanup_~tmp___0~0#1; 156369#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 156363#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 156360#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 156340#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 156334#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 152007#L805-22 assume !(0 == isFloorCalling_~floorID#1); 152008#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 156627#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 153459#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 151645#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 157456#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 156297#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 156298#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 156313#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 156312#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 156311#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 152484#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 152485#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 153114#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 153734#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 153676#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 153677#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 153680#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 153739#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 152773#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 153184#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 156868#L2287-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 156867#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 153338#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 153339#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 153725#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 162673#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 162672#L2232-5 assume !(1 == ~currentHeading~0); 162671#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 152676#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 153433#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 156411#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 156410#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 156409#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 156407#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 156408#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 156397#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 156388#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 156385#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 156382#L198-2 [2024-11-08 16:32:04,057 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:04,058 INFO L85 PathProgramCache]: Analyzing trace with hash 2009615150, now seen corresponding path program 1 times [2024-11-08 16:32:04,058 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:04,059 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1521145353] [2024-11-08 16:32:04,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:04,059 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:04,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:04,175 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:04,176 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:04,176 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1521145353] [2024-11-08 16:32:04,176 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1521145353] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:04,177 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:04,177 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:32:04,177 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1599872020] [2024-11-08 16:32:04,177 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:04,178 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:04,178 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:04,178 INFO L85 PathProgramCache]: Analyzing trace with hash 1475080066, now seen corresponding path program 1 times [2024-11-08 16:32:04,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:04,179 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1448073900] [2024-11-08 16:32:04,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:04,179 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:04,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:04,284 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:04,285 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:04,285 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1448073900] [2024-11-08 16:32:04,285 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1448073900] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:04,285 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:04,285 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 16:32:04,286 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1354943992] [2024-11-08 16:32:04,286 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:04,286 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:04,287 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:04,287 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 16:32:04,287 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 16:32:04,288 INFO L87 Difference]: Start difference. First operand 11391 states and 21038 transitions. cyclomatic complexity: 9648 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:04,444 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:04,444 INFO L93 Difference]: Finished difference Result 11409 states and 21056 transitions. [2024-11-08 16:32:04,444 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11409 states and 21056 transitions. [2024-11-08 16:32:04,504 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8323 [2024-11-08 16:32:04,677 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11409 states to 11409 states and 21056 transitions. [2024-11-08 16:32:04,678 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11409 [2024-11-08 16:32:04,686 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11409 [2024-11-08 16:32:04,686 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11409 states and 21056 transitions. [2024-11-08 16:32:04,694 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:04,695 INFO L218 hiAutomatonCegarLoop]: Abstraction has 11409 states and 21056 transitions. [2024-11-08 16:32:04,701 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11409 states and 21056 transitions. [2024-11-08 16:32:04,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11409 to 11403. [2024-11-08 16:32:04,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11403 states, 11403 states have (on average 1.8460054371656582) internal successors, (21050), 11402 states have internal predecessors, (21050), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:04,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11403 states to 11403 states and 21050 transitions. [2024-11-08 16:32:04,827 INFO L240 hiAutomatonCegarLoop]: Abstraction has 11403 states and 21050 transitions. [2024-11-08 16:32:04,827 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-08 16:32:04,829 INFO L425 stractBuchiCegarLoop]: Abstraction has 11403 states and 21050 transitions. [2024-11-08 16:32:04,829 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-08 16:32:04,829 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11403 states and 21050 transitions. [2024-11-08 16:32:04,867 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8318 [2024-11-08 16:32:04,867 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:04,867 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:04,869 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:04,869 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:04,869 INFO L745 eck$LassoCheckResult]: Stem: 174581#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 174582#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 175746#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 175229#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 175230#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 175429#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 176292#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 174475#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 174476#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 174606#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 174607#L1076 assume 0 == initPersonOnFloor_~floor#1; 175550#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 174546#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 174547#L868 assume !(0 == callOnFloor_~floorID#1); 176549#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 174700#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 176620#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 176619#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 176618#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 176617#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 176616#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 175787#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 175788#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 175317#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 175318#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 176615#L2413 assume !(0 != timeShift_~tmp___9~2#1); 176465#L2504 assume !(1 == ~doorState~0); 176466#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 175091#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 175092#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 175916#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 176362#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 176453#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 176454#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 176613#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 176606#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 174239#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 176101#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 176325#L2232-2 assume !(1 == ~currentHeading~0); 175185#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 174274#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 174275#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 176236#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 178952#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 178951#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 178950#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 178949#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 178946#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 178944#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 178940#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 178726#L198-2 [2024-11-08 16:32:04,870 INFO L747 eck$LassoCheckResult]: Loop: 178726#L198-2 assume !false; 178724#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 178722#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 178720#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 178718#L206 assume 1 != cleanup_~tmp___0~0#1; 178716#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 178714#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 178711#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 178707#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 178704#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 178699#L805-22 assume !(0 == isFloorCalling_~floorID#1); 174390#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 174392#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 178660#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 178655#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 178653#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 178651#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 178648#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 178647#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 178646#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 178645#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 178644#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 178642#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 178641#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 178639#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 178638#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 178637#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 178636#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 176552#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 175992#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 175993#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 176352#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 176447#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 185451#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 176526#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 176527#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 180871#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 180868#L2232-5 assume !(1 == ~currentHeading~0); 180863#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 180858#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 180845#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 180842#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 180841#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 180840#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 180839#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 180838#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 180831#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 178554#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 178555#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 178726#L198-2 [2024-11-08 16:32:04,871 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:04,871 INFO L85 PathProgramCache]: Analyzing trace with hash 2009615150, now seen corresponding path program 2 times [2024-11-08 16:32:04,871 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:04,871 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [135758642] [2024-11-08 16:32:04,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:04,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:04,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:04,965 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:04,965 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:04,967 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [135758642] [2024-11-08 16:32:04,967 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [135758642] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:04,971 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:04,971 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:32:04,972 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [549213343] [2024-11-08 16:32:04,972 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:04,972 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:04,973 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:04,973 INFO L85 PathProgramCache]: Analyzing trace with hash -519064640, now seen corresponding path program 1 times [2024-11-08 16:32:04,973 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:04,973 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [129466311] [2024-11-08 16:32:04,973 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:04,973 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:04,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:05,129 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:05,129 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:05,130 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [129466311] [2024-11-08 16:32:05,130 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [129466311] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:05,130 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:05,130 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:05,130 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [412012146] [2024-11-08 16:32:05,131 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:05,131 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:05,131 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:05,132 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-08 16:32:05,132 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2024-11-08 16:32:05,132 INFO L87 Difference]: Start difference. First operand 11403 states and 21050 transitions. cyclomatic complexity: 9648 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:06,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:06,513 INFO L93 Difference]: Finished difference Result 15607 states and 28782 transitions. [2024-11-08 16:32:06,514 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15607 states and 28782 transitions. [2024-11-08 16:32:06,558 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12504 [2024-11-08 16:32:06,604 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15607 states to 15607 states and 28782 transitions. [2024-11-08 16:32:06,604 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15607 [2024-11-08 16:32:06,617 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15607 [2024-11-08 16:32:06,618 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15607 states and 28782 transitions. [2024-11-08 16:32:06,733 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:06,733 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15607 states and 28782 transitions. [2024-11-08 16:32:06,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15607 states and 28782 transitions. [2024-11-08 16:32:06,869 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15607 to 14898. [2024-11-08 16:32:06,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14898 states, 14898 states have (on average 1.8501141092764128) internal successors, (27563), 14897 states have internal predecessors, (27563), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:06,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14898 states to 14898 states and 27563 transitions. [2024-11-08 16:32:06,911 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14898 states and 27563 transitions. [2024-11-08 16:32:06,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-11-08 16:32:06,913 INFO L425 stractBuchiCegarLoop]: Abstraction has 14898 states and 27563 transitions. [2024-11-08 16:32:06,913 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-08 16:32:06,913 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14898 states and 27563 transitions. [2024-11-08 16:32:06,960 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:06,961 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:06,961 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:06,968 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:06,968 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:06,968 INFO L745 eck$LassoCheckResult]: Stem: 201613#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 201614#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 202782#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 202264#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 202265#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 202467#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 203330#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 201505#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 201506#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 201638#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 201639#L1076 assume 0 == initPersonOnFloor_~floor#1; 202588#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 201578#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 201579#L868 assume !(0 == callOnFloor_~floorID#1); 203617#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 201733#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 203683#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 203682#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 203681#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 203680#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 203679#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 202821#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 202822#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 202355#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 202357#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 203677#L2413 assume !(0 != timeShift_~tmp___9~2#1); 203521#L2504 assume !(1 == ~doorState~0); 203522#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 202121#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 202122#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 202954#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 203403#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 203508#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 203509#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 203675#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 203668#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 201268#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 203134#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 203365#L2232-2 assume !(1 == ~currentHeading~0); 202217#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 201301#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 201302#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 203277#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 203686#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 201854#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 201855#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 205751#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 205756#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 205754#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 205749#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 205748#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 205746#L198-2 [2024-11-08 16:32:06,969 INFO L747 eck$LassoCheckResult]: Loop: 205746#L198-2 assume !false; 205745#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 205744#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 205743#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 205742#L206 assume 1 != cleanup_~tmp___0~0#1; 205741#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 205740#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 205739#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 205723#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 205724#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 209798#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 209796#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 209797#L805-26 assume !(0 == isFloorCalling_~floorID#1); 211385#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 211381#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 209404#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 209206#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 214180#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 209202#L2415-2 assume !(0 != ~persons_0~0); 213734#L2415-3 assume !(0 != ~persons_1~0); 213726#L2429-1 assume !(0 != ~persons_2~0); 213720#L2443-1 assume !(0 != ~persons_3~0); 213697#L2457-1 assume !(0 != ~persons_4~0); 213695#L2471-1 assume !(0 != ~persons_5~0); 213691#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 213690#L896-12 assume 0 == isPersonOnFloor_~floor#1; 213671#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 213642#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 213640#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 213638#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 213637#L896-14 assume 0 == isPersonOnFloor_~floor#1; 213630#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 213596#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 213594#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 213592#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 213586#L896-16 assume 0 == isPersonOnFloor_~floor#1; 213584#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 213547#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 213545#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 213543#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 213542#L896-18 assume 0 == isPersonOnFloor_~floor#1; 213510#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 213501#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 213499#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 213484#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 213479#L896-20 assume 0 == isPersonOnFloor_~floor#1; 213448#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 213441#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 213434#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 213431#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 213429#L896-22 assume 0 == isPersonOnFloor_~floor#1; 213285#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 213276#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 213267#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 213266#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 213264#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 213265#L852-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 202507#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 202508#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 202586#L1635-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 201304#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 203075#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 203199#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 202305#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 202306#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 201893#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 201894#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 201385#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 205747#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 205746#L198-2 [2024-11-08 16:32:06,970 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:06,970 INFO L85 PathProgramCache]: Analyzing trace with hash 182607256, now seen corresponding path program 1 times [2024-11-08 16:32:06,970 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:06,970 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1153226940] [2024-11-08 16:32:06,970 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:06,971 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:06,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:07,059 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:07,060 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:07,060 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1153226940] [2024-11-08 16:32:07,060 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1153226940] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:07,060 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:07,060 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:32:07,060 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1421689701] [2024-11-08 16:32:07,061 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:07,061 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:07,062 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:07,062 INFO L85 PathProgramCache]: Analyzing trace with hash 1664568664, now seen corresponding path program 1 times [2024-11-08 16:32:07,062 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:07,063 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1187547570] [2024-11-08 16:32:07,063 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:07,063 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:07,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:07,184 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:07,184 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:07,184 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1187547570] [2024-11-08 16:32:07,185 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1187547570] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:07,185 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:07,185 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:07,185 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [106176795] [2024-11-08 16:32:07,185 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:07,186 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:07,186 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:07,187 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-08 16:32:07,187 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-08 16:32:07,187 INFO L87 Difference]: Start difference. First operand 14898 states and 27563 transitions. cyclomatic complexity: 12666 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:07,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:07,421 INFO L93 Difference]: Finished difference Result 14898 states and 27557 transitions. [2024-11-08 16:32:07,421 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14898 states and 27557 transitions. [2024-11-08 16:32:07,502 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:07,539 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14898 states to 14898 states and 27557 transitions. [2024-11-08 16:32:07,540 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14898 [2024-11-08 16:32:07,552 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14898 [2024-11-08 16:32:07,552 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14898 states and 27557 transitions. [2024-11-08 16:32:07,567 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:07,567 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14898 states and 27557 transitions. [2024-11-08 16:32:07,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14898 states and 27557 transitions. [2024-11-08 16:32:07,764 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14898 to 14898. [2024-11-08 16:32:07,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14898 states, 14898 states have (on average 1.849711370653779) internal successors, (27557), 14897 states have internal predecessors, (27557), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:07,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14898 states to 14898 states and 27557 transitions. [2024-11-08 16:32:07,820 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14898 states and 27557 transitions. [2024-11-08 16:32:07,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-08 16:32:07,821 INFO L425 stractBuchiCegarLoop]: Abstraction has 14898 states and 27557 transitions. [2024-11-08 16:32:07,821 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-08 16:32:07,821 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14898 states and 27557 transitions. [2024-11-08 16:32:07,881 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:07,881 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:07,881 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:07,889 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:07,889 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:07,890 INFO L745 eck$LassoCheckResult]: Stem: 231418#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 231419#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 232580#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 232076#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 232077#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 232272#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 233117#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 231309#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 231310#L458 assume !(0 == getOrigin_~person#1); 232948#L462 assume !(1 == getOrigin_~person#1); 233070#L466 assume !(2 == getOrigin_~person#1); 232686#L470 assume !(3 == getOrigin_~person#1); 232687#L474 assume !(4 == getOrigin_~person#1); 232902#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 231443#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 231444#L1076 assume 0 == initPersonOnFloor_~floor#1; 232390#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 231383#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 231384#L868 assume !(0 == callOnFloor_~floorID#1); 233369#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 231537#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 233442#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 233441#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 233440#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 233439#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 233438#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 232619#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 232620#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 232163#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 232164#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 233437#L2413 assume !(0 != timeShift_~tmp___9~2#1); 233287#L2504 assume !(1 == ~doorState~0); 233288#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 231927#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 231928#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 232750#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 233182#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 233273#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 233274#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 233435#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 233424#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 231075#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 232928#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 233147#L2232-2 assume !(1 == ~currentHeading~0); 232028#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 231108#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 231109#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 233059#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 236250#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 231659#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 231660#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 233602#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 233607#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 233605#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 233600#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 233599#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 233597#L198-2 [2024-11-08 16:32:07,891 INFO L747 eck$LassoCheckResult]: Loop: 233597#L198-2 assume !false; 233593#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 233592#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 233591#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 233590#L206 assume 1 != cleanup_~tmp___0~0#1; 233589#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 233588#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 233587#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 233444#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 233198#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 245354#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 245353#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 233651#L805-26 assume !(0 == isFloorCalling_~floorID#1); 233652#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 241108#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 241105#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 241103#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 241100#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 241092#L2415-2 assume !(0 != ~persons_0~0); 241061#L2415-3 assume !(0 != ~persons_1~0); 241053#L2429-1 assume !(0 != ~persons_2~0); 241047#L2443-1 assume !(0 != ~persons_3~0); 241024#L2457-1 assume !(0 != ~persons_4~0); 241022#L2471-1 assume !(0 != ~persons_5~0); 241018#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 241017#L896-12 assume 0 == isPersonOnFloor_~floor#1; 241000#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 240971#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 240969#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 240967#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 240965#L896-14 assume 0 == isPersonOnFloor_~floor#1; 240961#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 240927#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 240925#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 240923#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 240922#L896-16 assume 0 == isPersonOnFloor_~floor#1; 240917#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 240880#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 240878#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 240876#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 240875#L896-18 assume 0 == isPersonOnFloor_~floor#1; 240842#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 240833#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 240831#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 240829#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 240828#L896-20 assume 0 == isPersonOnFloor_~floor#1; 240799#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 240786#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 240784#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 240782#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 240781#L896-22 assume 0 == isPersonOnFloor_~floor#1; 240754#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 240741#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 240662#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 240658#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 240653#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 240650#L852-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 240648#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 240645#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 240267#L1635-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 240265#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 240264#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 240263#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 240262#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 239399#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 239392#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 239390#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 239387#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 233598#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 233597#L198-2 [2024-11-08 16:32:07,891 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:07,892 INFO L85 PathProgramCache]: Analyzing trace with hash 811806567, now seen corresponding path program 1 times [2024-11-08 16:32:07,892 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:07,892 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1125775113] [2024-11-08 16:32:07,892 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:07,893 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:07,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:08,141 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:08,141 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:08,142 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1125775113] [2024-11-08 16:32:08,142 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1125775113] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:08,142 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:08,142 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-08 16:32:08,142 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [412490140] [2024-11-08 16:32:08,142 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:08,143 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:08,143 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:08,143 INFO L85 PathProgramCache]: Analyzing trace with hash -2140271334, now seen corresponding path program 1 times [2024-11-08 16:32:08,143 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:08,143 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [526963270] [2024-11-08 16:32:08,143 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:08,144 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:08,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:08,219 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:08,220 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:08,220 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [526963270] [2024-11-08 16:32:08,220 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [526963270] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:08,220 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:08,220 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 16:32:08,220 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1796688930] [2024-11-08 16:32:08,221 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:08,221 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:08,221 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:08,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-08 16:32:08,221 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-08 16:32:08,222 INFO L87 Difference]: Start difference. First operand 14898 states and 27557 transitions. cyclomatic complexity: 12660 Second operand has 6 states, 6 states have (on average 9.333333333333334) internal successors, (56), 6 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:08,365 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:08,365 INFO L93 Difference]: Finished difference Result 14892 states and 27544 transitions. [2024-11-08 16:32:08,365 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14892 states and 27544 transitions. [2024-11-08 16:32:08,433 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:08,478 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14892 states to 14892 states and 27544 transitions. [2024-11-08 16:32:08,479 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14892 [2024-11-08 16:32:08,491 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14892 [2024-11-08 16:32:08,492 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14892 states and 27544 transitions. [2024-11-08 16:32:08,504 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:08,505 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27544 transitions. [2024-11-08 16:32:08,514 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14892 states and 27544 transitions. [2024-11-08 16:32:08,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14892 to 14892. [2024-11-08 16:32:08,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14892 states, 14892 states have (on average 1.849583669084072) internal successors, (27544), 14891 states have internal predecessors, (27544), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:08,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14892 states to 14892 states and 27544 transitions. [2024-11-08 16:32:08,820 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27544 transitions. [2024-11-08 16:32:08,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-08 16:32:08,822 INFO L425 stractBuchiCegarLoop]: Abstraction has 14892 states and 27544 transitions. [2024-11-08 16:32:08,822 INFO L332 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-11-08 16:32:08,822 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14892 states and 27544 transitions. [2024-11-08 16:32:08,865 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:08,865 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:08,865 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:08,868 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:08,869 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:08,869 INFO L745 eck$LassoCheckResult]: Stem: 261222#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 261223#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 262375#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 261874#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 261875#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 262071#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 262911#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 261112#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 261113#L458 assume !(0 == getOrigin_~person#1); 262742#L462 assume !(1 == getOrigin_~person#1); 262864#L466 assume !(2 == getOrigin_~person#1); 262483#L470 assume !(3 == getOrigin_~person#1); 262484#L474 assume !(4 == getOrigin_~person#1); 262697#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 261247#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 261248#L1076 assume !(0 == initPersonOnFloor_~floor#1); 262502#L1103 assume 1 == initPersonOnFloor_~floor#1; 262992#L1104 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 261187#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 261188#L868 assume !(0 == callOnFloor_~floorID#1); 263158#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 261341#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 263220#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 263219#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 263218#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 263217#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 263216#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 262415#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 262416#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 261964#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 261965#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 263215#L2413 assume !(0 != timeShift_~tmp___9~2#1); 263081#L2504 assume !(1 == ~doorState~0); 263082#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 261729#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 261730#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 262544#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 262975#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 263067#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 263068#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 263213#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 263207#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 260877#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 262721#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 262942#L2232-2 assume !(1 == ~currentHeading~0); 261826#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 260910#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 260911#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 262789#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 262541#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 261461#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 261462#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 261532#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 261314#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 262005#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 261851#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 261990#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 263120#L198-2 [2024-11-08 16:32:08,869 INFO L747 eck$LassoCheckResult]: Loop: 263120#L198-2 assume !false; 263112#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 261842#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 261843#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 261988#L206 assume 1 != cleanup_~tmp___0~0#1; 261989#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 263016#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 263017#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 263286#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 263287#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 269025#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 269018#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 263765#L805-26 assume !(0 == isFloorCalling_~floorID#1); 263764#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 263760#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 263758#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 263258#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 273271#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 263254#L2415-2 assume !(0 != ~persons_0~0); 273233#L2415-3 assume !(0 != ~persons_1~0); 273225#L2429-1 assume !(0 != ~persons_2~0); 273219#L2443-1 assume !(0 != ~persons_3~0); 273167#L2457-1 assume !(0 != ~persons_4~0); 273163#L2471-1 assume !(0 != ~persons_5~0); 273155#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 273153#L896-12 assume 0 == isPersonOnFloor_~floor#1; 273120#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 273091#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 273089#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 273087#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 273086#L896-14 assume 0 == isPersonOnFloor_~floor#1; 273079#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 273045#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 273043#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 273041#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 273039#L896-16 assume 0 == isPersonOnFloor_~floor#1; 273038#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 273001#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 273000#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 272993#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 272991#L896-18 assume 0 == isPersonOnFloor_~floor#1; 271094#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 271091#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 271089#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 271090#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 272038#L896-20 assume 0 == isPersonOnFloor_~floor#1; 272009#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 271996#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 271994#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 271992#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 271991#L896-22 assume 0 == isPersonOnFloor_~floor#1; 271964#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 271955#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 271946#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 271945#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 271944#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 260957#L852-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 260958#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 262109#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 262185#L1635-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 260913#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 262779#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 262780#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 261916#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 261737#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 260995#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 261012#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 260994#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 262198#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 263120#L198-2 [2024-11-08 16:32:08,870 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:08,870 INFO L85 PathProgramCache]: Analyzing trace with hash 750066468, now seen corresponding path program 1 times [2024-11-08 16:32:08,870 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:08,870 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [829605924] [2024-11-08 16:32:08,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:08,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:08,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:08,957 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:08,957 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:08,957 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [829605924] [2024-11-08 16:32:08,957 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [829605924] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:08,957 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:08,957 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 16:32:08,958 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1489628885] [2024-11-08 16:32:08,958 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:08,958 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:08,958 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:08,959 INFO L85 PathProgramCache]: Analyzing trace with hash -2140271334, now seen corresponding path program 2 times [2024-11-08 16:32:08,959 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:08,959 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1271164119] [2024-11-08 16:32:08,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:08,959 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:08,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:09,076 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:09,077 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:09,077 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1271164119] [2024-11-08 16:32:09,077 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1271164119] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:09,077 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:09,077 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 16:32:09,078 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1563407289] [2024-11-08 16:32:09,078 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:09,078 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:09,078 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:09,078 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 16:32:09,078 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 16:32:09,079 INFO L87 Difference]: Start difference. First operand 14892 states and 27544 transitions. cyclomatic complexity: 12653 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:09,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:09,272 INFO L93 Difference]: Finished difference Result 14902 states and 27555 transitions. [2024-11-08 16:32:09,272 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14902 states and 27555 transitions. [2024-11-08 16:32:09,346 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:09,395 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14902 states to 14902 states and 27555 transitions. [2024-11-08 16:32:09,396 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14902 [2024-11-08 16:32:09,409 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14902 [2024-11-08 16:32:09,410 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14902 states and 27555 transitions. [2024-11-08 16:32:09,422 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:09,422 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14902 states and 27555 transitions. [2024-11-08 16:32:09,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14902 states and 27555 transitions. [2024-11-08 16:32:09,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14902 to 14892. [2024-11-08 16:32:09,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14892 states, 14892 states have (on average 1.8493150684931507) internal successors, (27540), 14891 states have internal predecessors, (27540), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:09,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14892 states to 14892 states and 27540 transitions. [2024-11-08 16:32:09,885 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27540 transitions. [2024-11-08 16:32:09,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-08 16:32:09,887 INFO L425 stractBuchiCegarLoop]: Abstraction has 14892 states and 27540 transitions. [2024-11-08 16:32:09,887 INFO L332 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2024-11-08 16:32:09,888 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14892 states and 27540 transitions. [2024-11-08 16:32:09,938 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:09,938 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:09,938 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:09,945 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:09,945 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:09,945 INFO L745 eck$LassoCheckResult]: Stem: 291020#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 291021#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 292179#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 291676#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 291677#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 291870#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 292708#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 290916#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 290917#L458 assume !(0 == getOrigin_~person#1); 292543#L462 assume !(1 == getOrigin_~person#1); 292664#L466 assume !(2 == getOrigin_~person#1); 292286#L470 assume !(3 == getOrigin_~person#1); 292287#L474 assume !(4 == getOrigin_~person#1); 292500#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 291046#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 291047#L1076 assume !(0 == initPersonOnFloor_~floor#1); 292306#L1103 assume 1 == initPersonOnFloor_~floor#1; 292785#L1104 assume !(0 == initPersonOnFloor_~person#1); 292984#L1107 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 290989#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 290990#L868 assume !(0 == callOnFloor_~floorID#1); 292953#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 291141#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 293007#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 293006#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 293005#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 293004#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 293003#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 292219#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 292220#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 291764#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 291765#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 293002#L2413 assume !(0 != timeShift_~tmp___9~2#1); 292875#L2504 assume !(1 == ~doorState~0); 292876#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 291529#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 291530#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 292347#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 292769#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 292865#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 292866#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 293000#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 292994#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 290681#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 292523#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 292737#L2232-2 assume !(1 == ~currentHeading~0); 291628#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 290714#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 290715#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 292591#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 292344#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 291260#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 291261#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 291331#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 291114#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 291805#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 291653#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 299094#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 299095#L198-2 [2024-11-08 16:32:09,947 INFO L747 eck$LassoCheckResult]: Loop: 299095#L198-2 assume !false; 300033#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 300032#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 300031#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 300030#L206 assume 1 != cleanup_~tmp___0~0#1; 300029#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 300028#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 300021#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 300018#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 300016#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 300015#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 300014#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 300008#L805-26 assume !(0 == isFloorCalling_~floorID#1); 300006#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 300002#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 299994#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 299992#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 299991#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 299982#L2415-2 assume !(0 != ~persons_0~0); 299951#L2415-3 assume !(0 != ~persons_1~0); 299943#L2429-1 assume !(0 != ~persons_2~0); 299937#L2443-1 assume !(0 != ~persons_3~0); 299914#L2457-1 assume !(0 != ~persons_4~0); 299912#L2471-1 assume !(0 != ~persons_5~0); 299908#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 299907#L896-12 assume 0 == isPersonOnFloor_~floor#1; 299785#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 299756#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 299754#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 299752#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 299751#L896-14 assume 0 == isPersonOnFloor_~floor#1; 299745#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 299717#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 299715#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 299716#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 301172#L896-16 assume 0 == isPersonOnFloor_~floor#1; 301167#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 301136#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 301133#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 301130#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 301127#L896-18 assume 0 == isPersonOnFloor_~floor#1; 301098#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 301095#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 301025#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 301022#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 301018#L896-20 assume 0 == isPersonOnFloor_~floor#1; 300990#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 300981#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 300973#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 300971#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 300967#L896-22 assume 0 == isPersonOnFloor_~floor#1; 299808#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 299799#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 299797#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 299798#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 300128#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 300125#L852-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 300124#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 300115#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 299162#L1635-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 300052#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 300051#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 300049#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 300047#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 300044#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 300040#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 300038#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 300035#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 300034#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 299095#L198-2 [2024-11-08 16:32:09,948 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:09,948 INFO L85 PathProgramCache]: Analyzing trace with hash 1925532996, now seen corresponding path program 1 times [2024-11-08 16:32:09,948 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:09,948 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [370512841] [2024-11-08 16:32:09,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:09,949 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:09,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:10,055 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:10,055 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:10,055 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [370512841] [2024-11-08 16:32:10,055 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [370512841] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:10,056 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:10,056 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 16:32:10,056 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1352253408] [2024-11-08 16:32:10,056 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:10,058 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:10,059 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:10,059 INFO L85 PathProgramCache]: Analyzing trace with hash -2140271334, now seen corresponding path program 3 times [2024-11-08 16:32:10,059 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:10,059 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [304523975] [2024-11-08 16:32:10,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:10,060 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:10,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:10,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:10,150 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:10,154 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [304523975] [2024-11-08 16:32:10,155 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [304523975] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:10,155 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:10,155 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 16:32:10,155 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1531593589] [2024-11-08 16:32:10,155 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:10,156 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:10,156 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:10,156 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 16:32:10,156 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 16:32:10,156 INFO L87 Difference]: Start difference. First operand 14892 states and 27540 transitions. cyclomatic complexity: 12649 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:10,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:10,538 INFO L93 Difference]: Finished difference Result 14902 states and 27551 transitions. [2024-11-08 16:32:10,539 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14902 states and 27551 transitions. [2024-11-08 16:32:10,629 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:10,687 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14902 states to 14902 states and 27551 transitions. [2024-11-08 16:32:10,688 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14902 [2024-11-08 16:32:10,702 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14902 [2024-11-08 16:32:10,702 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14902 states and 27551 transitions. [2024-11-08 16:32:10,716 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:10,716 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14902 states and 27551 transitions. [2024-11-08 16:32:10,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14902 states and 27551 transitions. [2024-11-08 16:32:10,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14902 to 14892. [2024-11-08 16:32:10,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14892 states, 14892 states have (on average 1.8490464679022294) internal successors, (27536), 14891 states have internal predecessors, (27536), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:10,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14892 states to 14892 states and 27536 transitions. [2024-11-08 16:32:10,972 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27536 transitions. [2024-11-08 16:32:10,973 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-08 16:32:10,973 INFO L425 stractBuchiCegarLoop]: Abstraction has 14892 states and 27536 transitions. [2024-11-08 16:32:10,973 INFO L332 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2024-11-08 16:32:10,974 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14892 states and 27536 transitions. [2024-11-08 16:32:11,027 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:11,028 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:11,028 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:11,032 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:11,033 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:11,033 INFO L745 eck$LassoCheckResult]: Stem: 320826#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 320827#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 321988#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 321483#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 321484#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 321681#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 322515#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 320720#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 320721#L458 assume !(0 == getOrigin_~person#1); 322347#L462 assume !(1 == getOrigin_~person#1); 322470#L466 assume !(2 == getOrigin_~person#1); 322091#L470 assume !(3 == getOrigin_~person#1); 322092#L474 assume !(4 == getOrigin_~person#1); 322306#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 320851#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 320852#L1076 assume !(0 == initPersonOnFloor_~floor#1); 322111#L1103 assume 1 == initPersonOnFloor_~floor#1; 322598#L1104 assume !(0 == initPersonOnFloor_~person#1); 322807#L1107 assume !(1 == initPersonOnFloor_~person#1); 322182#L1110 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 320795#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 320796#L868 assume !(0 == callOnFloor_~floorID#1); 322770#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 320945#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 322832#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 322831#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 322830#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 322829#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 322828#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 322026#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 322027#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 321572#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 321573#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 322827#L2413 assume !(0 != timeShift_~tmp___9~2#1); 322687#L2504 assume !(1 == ~doorState~0); 322688#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 321335#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 321336#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 322152#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 322583#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 322676#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 322677#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 322825#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 322816#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 320485#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 322327#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 322546#L2232-2 assume !(1 == ~currentHeading~0); 321434#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 320518#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 320519#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 322396#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 322149#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 321064#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 321065#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 328951#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 321614#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 321615#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 321598#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 321599#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 328946#L198-2 [2024-11-08 16:32:11,033 INFO L747 eck$LassoCheckResult]: Loop: 328946#L198-2 assume !false; 328943#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 328938#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 328935#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 328932#L206 assume 1 != cleanup_~tmp___0~0#1; 328927#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 328923#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 328924#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 330593#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 330594#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 335272#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 335271#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 322887#L805-26 assume !(0 == isFloorCalling_~floorID#1); 322886#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 322882#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 322881#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 322873#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 332482#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 322869#L2415-2 assume !(0 != ~persons_0~0); 332454#L2415-3 assume !(0 != ~persons_1~0); 332446#L2429-1 assume !(0 != ~persons_2~0); 332440#L2443-1 assume !(0 != ~persons_3~0); 332417#L2457-1 assume !(0 != ~persons_4~0); 332415#L2471-1 assume !(0 != ~persons_5~0); 332411#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 332410#L896-12 assume 0 == isPersonOnFloor_~floor#1; 332385#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 332356#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 332354#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 332352#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 332351#L896-14 assume 0 == isPersonOnFloor_~floor#1; 332333#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 332299#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 332297#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 332295#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 332294#L896-16 assume 0 == isPersonOnFloor_~floor#1; 332283#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 332252#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 332245#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 332242#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 332241#L896-18 assume 0 == isPersonOnFloor_~floor#1; 332203#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 332194#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 332192#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 332190#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 332189#L896-20 assume 0 == isPersonOnFloor_~floor#1; 332160#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 332153#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 332151#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 332152#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 333307#L896-22 assume 0 == isPersonOnFloor_~floor#1; 333280#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 331836#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 322397#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 321527#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 321894#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 322750#L852-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 331526#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 331514#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 331478#L1635-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 330627#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 330621#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 330619#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 330612#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 330610#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 330607#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 328971#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 328957#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 328950#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 328946#L198-2 [2024-11-08 16:32:11,034 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:11,034 INFO L85 PathProgramCache]: Analyzing trace with hash -1571744897, now seen corresponding path program 1 times [2024-11-08 16:32:11,034 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:11,035 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1392733187] [2024-11-08 16:32:11,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:11,035 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:11,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:11,154 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:11,155 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:11,155 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1392733187] [2024-11-08 16:32:11,155 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1392733187] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:11,155 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:11,156 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 16:32:11,156 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [267209342] [2024-11-08 16:32:11,156 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:11,156 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:11,157 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:11,157 INFO L85 PathProgramCache]: Analyzing trace with hash 1664568664, now seen corresponding path program 2 times [2024-11-08 16:32:11,157 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:11,157 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [638078855] [2024-11-08 16:32:11,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:11,158 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:11,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:11,308 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:11,308 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:11,308 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [638078855] [2024-11-08 16:32:11,309 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [638078855] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:11,309 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:11,309 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:11,309 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1053320237] [2024-11-08 16:32:11,310 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:11,310 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:11,310 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:11,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 16:32:11,311 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 16:32:11,311 INFO L87 Difference]: Start difference. First operand 14892 states and 27536 transitions. cyclomatic complexity: 12645 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:11,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:11,538 INFO L93 Difference]: Finished difference Result 14902 states and 27547 transitions. [2024-11-08 16:32:11,538 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14902 states and 27547 transitions. [2024-11-08 16:32:11,628 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:11,930 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14902 states to 14902 states and 27547 transitions. [2024-11-08 16:32:11,930 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14902 [2024-11-08 16:32:11,942 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14902 [2024-11-08 16:32:11,942 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14902 states and 27547 transitions. [2024-11-08 16:32:11,953 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:11,954 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14902 states and 27547 transitions. [2024-11-08 16:32:11,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14902 states and 27547 transitions. [2024-11-08 16:32:12,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14902 to 14892. [2024-11-08 16:32:12,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14892 states, 14892 states have (on average 1.848777867311308) internal successors, (27532), 14891 states have internal predecessors, (27532), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:12,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14892 states to 14892 states and 27532 transitions. [2024-11-08 16:32:12,146 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27532 transitions. [2024-11-08 16:32:12,147 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-08 16:32:12,147 INFO L425 stractBuchiCegarLoop]: Abstraction has 14892 states and 27532 transitions. [2024-11-08 16:32:12,147 INFO L332 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2024-11-08 16:32:12,147 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14892 states and 27532 transitions. [2024-11-08 16:32:12,194 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:12,194 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:12,195 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:12,199 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:12,199 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:12,199 INFO L745 eck$LassoCheckResult]: Stem: 350630#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 350631#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 351792#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 351287#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 351288#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 351485#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 352339#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 350526#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 350527#L458 assume !(0 == getOrigin_~person#1); 352163#L462 assume !(1 == getOrigin_~person#1); 352288#L466 assume !(2 == getOrigin_~person#1); 351898#L470 assume !(3 == getOrigin_~person#1); 351899#L474 assume !(4 == getOrigin_~person#1); 352120#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 350656#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 350657#L1076 assume !(0 == initPersonOnFloor_~floor#1); 351920#L1103 assume !(1 == initPersonOnFloor_~floor#1); 350304#L1130 assume !(2 == initPersonOnFloor_~floor#1); 350306#L1157 assume !(3 == initPersonOnFloor_~floor#1); 351676#L1184 assume !(4 == initPersonOnFloor_~floor#1); 350599#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 350600#L868 assume !(0 == callOnFloor_~floorID#1); 352604#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 350750#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 352670#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 352669#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 352668#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 352667#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 352666#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 351833#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 351834#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 351374#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 351375#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 352665#L2413 assume !(0 != timeShift_~tmp___9~2#1); 352519#L2504 assume !(1 == ~doorState~0); 352520#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 351141#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 351142#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 351963#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 352412#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 352508#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 352509#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 352663#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 352655#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 350291#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 352143#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 352374#L2232-2 assume !(1 == ~currentHeading~0); 351238#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 350324#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 350325#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 352210#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 351960#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 350869#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 350870#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 352040#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 350723#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 351714#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 351263#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 351400#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 352562#L198-2 [2024-11-08 16:32:12,199 INFO L747 eck$LassoCheckResult]: Loop: 352562#L198-2 assume !false; 361023#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 361022#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 361021#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 361020#L206 assume 1 != cleanup_~tmp___0~0#1; 361010#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 361008#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 361006#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 360996#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 360995#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 360994#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 360993#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 360992#L805-26 assume !(0 == isFloorCalling_~floorID#1); 360991#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 360981#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 360979#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 360972#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 360962#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 360960#L2415-2 assume !(0 != ~persons_0~0); 360944#L2415-3 assume !(0 != ~persons_1~0); 360936#L2429-1 assume !(0 != ~persons_2~0); 360931#L2443-1 assume !(0 != ~persons_3~0); 360912#L2457-1 assume !(0 != ~persons_4~0); 360910#L2471-1 assume !(0 != ~persons_5~0); 360907#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 360905#L896-12 assume 0 == isPersonOnFloor_~floor#1; 360896#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 360873#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 360871#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 360872#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 362981#L896-14 assume 0 == isPersonOnFloor_~floor#1; 360154#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 360120#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 360118#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 360116#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 360114#L896-16 assume 0 == isPersonOnFloor_~floor#1; 360113#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 360076#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 360074#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 360072#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 360071#L896-18 assume 0 == isPersonOnFloor_~floor#1; 359922#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 359919#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 359917#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 359918#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 361163#L896-20 assume 0 == isPersonOnFloor_~floor#1; 361134#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 361121#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 361119#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 361117#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 361116#L896-22 assume 0 == isPersonOnFloor_~floor#1; 361089#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 361080#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 361071#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 361070#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 361068#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 361069#L852-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 361177#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 361061#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 359355#L1635-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 350327#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 361056#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 361055#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 361054#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 361052#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 361053#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 361038#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 361027#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 361026#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 352562#L198-2 [2024-11-08 16:32:12,200 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:12,200 INFO L85 PathProgramCache]: Analyzing trace with hash -948566273, now seen corresponding path program 1 times [2024-11-08 16:32:12,200 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:12,200 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [191330199] [2024-11-08 16:32:12,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:12,201 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:12,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:12,303 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:12,304 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:12,304 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [191330199] [2024-11-08 16:32:12,304 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [191330199] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:12,304 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:12,305 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 16:32:12,305 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1917352851] [2024-11-08 16:32:12,305 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:12,305 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:12,306 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:12,306 INFO L85 PathProgramCache]: Analyzing trace with hash 1664568664, now seen corresponding path program 3 times [2024-11-08 16:32:12,306 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:12,306 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1548316715] [2024-11-08 16:32:12,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:12,307 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:12,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:12,422 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:12,422 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:12,423 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1548316715] [2024-11-08 16:32:12,423 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1548316715] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:12,423 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:12,423 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:12,423 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [138037931] [2024-11-08 16:32:12,423 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:12,424 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:12,424 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:12,424 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 16:32:12,424 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 16:32:12,424 INFO L87 Difference]: Start difference. First operand 14892 states and 27532 transitions. cyclomatic complexity: 12641 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:12,515 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:12,516 INFO L93 Difference]: Finished difference Result 14871 states and 27498 transitions. [2024-11-08 16:32:12,516 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14871 states and 27498 transitions. [2024-11-08 16:32:12,588 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:12,639 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14871 states to 14871 states and 27498 transitions. [2024-11-08 16:32:12,639 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14871 [2024-11-08 16:32:12,653 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14871 [2024-11-08 16:32:12,653 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14871 states and 27498 transitions. [2024-11-08 16:32:12,666 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:12,667 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27498 transitions. [2024-11-08 16:32:12,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14871 states and 27498 transitions. [2024-11-08 16:32:13,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14871 to 14871. [2024-11-08 16:32:13,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14871 states, 14871 states have (on average 1.8491022796045995) internal successors, (27498), 14870 states have internal predecessors, (27498), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:13,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14871 states to 14871 states and 27498 transitions. [2024-11-08 16:32:13,063 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27498 transitions. [2024-11-08 16:32:13,063 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-08 16:32:13,063 INFO L425 stractBuchiCegarLoop]: Abstraction has 14871 states and 27498 transitions. [2024-11-08 16:32:13,063 INFO L332 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2024-11-08 16:32:13,063 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14871 states and 27498 transitions. [2024-11-08 16:32:13,109 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:13,109 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:13,109 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:13,114 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:13,114 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:13,114 INFO L745 eck$LassoCheckResult]: Stem: 380402#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 380403#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 381544#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 381046#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 381047#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 381244#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 382075#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 380298#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 380299#L458 assume !(0 == getOrigin_~person#1); 381909#L462 assume !(1 == getOrigin_~person#1); 382034#L466 assume !(2 == getOrigin_~person#1); 381647#L470 assume !(3 == getOrigin_~person#1); 381648#L474 assume !(4 == getOrigin_~person#1); 381865#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 380427#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 380428#L1076 assume !(0 == initPersonOnFloor_~floor#1); 381667#L1103 assume 1 == initPersonOnFloor_~floor#1; 382155#L1104 assume !(0 == initPersonOnFloor_~person#1); 382354#L1107 assume !(1 == initPersonOnFloor_~person#1); 381741#L1110 assume !(2 == initPersonOnFloor_~person#1); 381742#L1113 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 380370#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 380371#L868 assume !(0 == callOnFloor_~floorID#1); 382321#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 380517#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 382383#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 382382#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 382381#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 382380#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 382379#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 381584#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 381585#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 381135#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 381137#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 382377#L2413 assume !(0 != timeShift_~tmp___9~2#1); 382241#L2504 assume !(1 == ~doorState~0); 382242#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 380903#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 380904#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 381709#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 382136#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 382230#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 382231#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 382375#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 382361#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 380066#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 381888#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 382103#L2232-2 assume !(1 == ~currentHeading~0); 381001#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 380096#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 380097#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 382025#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 381706#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 380637#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 380638#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 382536#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 382541#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 382539#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 382534#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 382533#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 382532#L198-2 [2024-11-08 16:32:13,115 INFO L747 eck$LassoCheckResult]: Loop: 382532#L198-2 assume !false; 382527#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 382528#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 382523#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 382524#L206 assume 1 != cleanup_~tmp___0~0#1; 382520#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 382519#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 382517#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 382518#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 389035#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 389030#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 389028#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 389027#L805-26 assume !(0 == isFloorCalling_~floorID#1); 389013#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 389008#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 389004#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 389002#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 388151#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 388149#L2415-2 assume !(0 != ~persons_0~0); 388048#L2415-3 assume !(0 != ~persons_1~0); 388018#L2429-1 assume !(0 != ~persons_2~0); 388005#L2443-1 assume !(0 != ~persons_3~0); 387978#L2457-1 assume !(0 != ~persons_4~0); 387976#L2471-1 assume !(0 != ~persons_5~0); 387972#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 387971#L896-12 assume 0 == isPersonOnFloor_~floor#1; 387954#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 387930#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 387922#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 387920#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 387916#L896-14 assume 0 == isPersonOnFloor_~floor#1; 387912#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 387884#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 387882#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 387883#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 388337#L896-16 assume 0 == isPersonOnFloor_~floor#1; 387844#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 387813#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 387811#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 387812#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 388440#L896-18 assume 0 == isPersonOnFloor_~floor#1; 388407#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 388398#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 388396#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 388394#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 388393#L896-20 assume 0 == isPersonOnFloor_~floor#1; 387073#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 387065#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 387062#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 387060#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 387059#L896-22 assume 0 == isPersonOnFloor_~floor#1; 387013#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 386242#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 385980#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 385903#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 385854#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 385842#L852-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 385836#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 385828#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 385814#L1635-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 385812#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 385811#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 385809#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 385810#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 382563#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 382557#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 382555#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 382553#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 382531#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 382532#L198-2 [2024-11-08 16:32:13,116 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:13,116 INFO L85 PathProgramCache]: Analyzing trace with hash 399755519, now seen corresponding path program 1 times [2024-11-08 16:32:13,116 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:13,116 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [650530869] [2024-11-08 16:32:13,116 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:13,116 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:13,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:13,222 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:13,222 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:13,222 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [650530869] [2024-11-08 16:32:13,223 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [650530869] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:13,223 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:13,223 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 16:32:13,224 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [878202090] [2024-11-08 16:32:13,224 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:13,224 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:13,224 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:13,225 INFO L85 PathProgramCache]: Analyzing trace with hash -2140271334, now seen corresponding path program 4 times [2024-11-08 16:32:13,225 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:13,225 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [816003844] [2024-11-08 16:32:13,225 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:13,225 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:13,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:13,326 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:13,326 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:13,326 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [816003844] [2024-11-08 16:32:13,326 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [816003844] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:13,326 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:13,327 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:13,327 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [353491040] [2024-11-08 16:32:13,327 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:13,327 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:13,327 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:13,328 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 16:32:13,328 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 16:32:13,328 INFO L87 Difference]: Start difference. First operand 14871 states and 27498 transitions. cyclomatic complexity: 12628 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 4 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:13,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:13,425 INFO L93 Difference]: Finished difference Result 14871 states and 27497 transitions. [2024-11-08 16:32:13,426 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14871 states and 27497 transitions. [2024-11-08 16:32:13,466 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:13,493 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14871 states to 14871 states and 27497 transitions. [2024-11-08 16:32:13,494 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14871 [2024-11-08 16:32:13,506 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14871 [2024-11-08 16:32:13,506 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14871 states and 27497 transitions. [2024-11-08 16:32:13,516 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:13,516 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27497 transitions. [2024-11-08 16:32:13,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14871 states and 27497 transitions. [2024-11-08 16:32:13,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14871 to 14871. [2024-11-08 16:32:13,895 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14871 states, 14871 states have (on average 1.8490350346311613) internal successors, (27497), 14870 states have internal predecessors, (27497), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:13,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14871 states to 14871 states and 27497 transitions. [2024-11-08 16:32:13,918 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27497 transitions. [2024-11-08 16:32:13,918 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-08 16:32:13,919 INFO L425 stractBuchiCegarLoop]: Abstraction has 14871 states and 27497 transitions. [2024-11-08 16:32:13,919 INFO L332 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2024-11-08 16:32:13,919 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14871 states and 27497 transitions. [2024-11-08 16:32:13,949 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:13,949 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:13,949 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:13,952 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:13,953 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:13,953 INFO L745 eck$LassoCheckResult]: Stem: 410160#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 410161#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 411304#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 410803#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 410804#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 411002#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 411824#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 410053#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 410054#L458 assume !(0 == getOrigin_~person#1); 411664#L462 assume !(1 == getOrigin_~person#1); 411786#L466 assume !(2 == getOrigin_~person#1); 411407#L470 assume !(3 == getOrigin_~person#1); 411408#L474 assume !(4 == getOrigin_~person#1); 411623#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 410185#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 410186#L1076 assume !(0 == initPersonOnFloor_~floor#1); 411426#L1103 assume 1 == initPersonOnFloor_~floor#1; 411905#L1104 assume !(0 == initPersonOnFloor_~person#1); 412109#L1107 assume !(1 == initPersonOnFloor_~person#1); 411498#L1110 assume !(2 == initPersonOnFloor_~person#1); 411499#L1113 assume !(3 == initPersonOnFloor_~person#1); 411513#L1116 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 410127#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 410128#L868 assume !(0 == callOnFloor_~floorID#1); 412071#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 410276#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 412138#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 412137#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 412136#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 412135#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 412134#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 411343#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 411344#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 410892#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 410894#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 412132#L2413 assume !(0 != timeShift_~tmp___9~2#1); 411989#L2504 assume !(1 == ~doorState~0); 411990#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 410661#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 410662#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 411466#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 411889#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 411979#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 411980#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 412130#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 412122#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 409820#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 411644#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 411854#L2232-2 assume !(1 == ~currentHeading~0); 410760#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 409850#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 409851#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 411775#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 411463#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 410396#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 410397#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 412290#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 412295#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 412293#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 412288#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 412287#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 412283#L198-2 [2024-11-08 16:32:13,953 INFO L747 eck$LassoCheckResult]: Loop: 412283#L198-2 assume !false; 412284#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 412279#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 412280#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 412275#L206 assume 1 != cleanup_~tmp___0~0#1; 412276#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 418796#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 418795#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 418788#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 418787#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 418782#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 418780#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 418779#L805-26 assume !(0 == isFloorCalling_~floorID#1); 418765#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 418760#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 418756#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 418753#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 417902#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 417900#L2415-2 assume !(0 != ~persons_0~0); 417799#L2415-3 assume !(0 != ~persons_1~0); 417769#L2429-1 assume !(0 != ~persons_2~0); 417756#L2443-1 assume !(0 != ~persons_3~0); 417729#L2457-1 assume !(0 != ~persons_4~0); 417727#L2471-1 assume !(0 != ~persons_5~0); 417723#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 417722#L896-12 assume 0 == isPersonOnFloor_~floor#1; 417705#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 417681#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 417673#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 417671#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 417667#L896-14 assume 0 == isPersonOnFloor_~floor#1; 417663#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 417635#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 417633#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 417634#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 418088#L896-16 assume 0 == isPersonOnFloor_~floor#1; 417595#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 417564#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 417562#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 417563#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 418191#L896-18 assume 0 == isPersonOnFloor_~floor#1; 418158#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 418149#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 418147#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 418145#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 418144#L896-20 assume 0 == isPersonOnFloor_~floor#1; 416824#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 416816#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 416813#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 416811#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 416810#L896-22 assume 0 == isPersonOnFloor_~floor#1; 416764#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 415993#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 415731#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 415654#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 415605#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 415593#L852-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 415587#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 415579#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 415565#L1635-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 415563#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 415562#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 415561#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 415560#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 415558#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 415556#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 415557#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 412304#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 412305#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 412283#L198-2 [2024-11-08 16:32:13,954 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:13,954 INFO L85 PathProgramCache]: Analyzing trace with hash 104691674, now seen corresponding path program 1 times [2024-11-08 16:32:13,954 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:13,954 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [422102219] [2024-11-08 16:32:13,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:13,954 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:13,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:14,067 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:14,068 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:14,068 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [422102219] [2024-11-08 16:32:14,068 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [422102219] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:14,068 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:14,068 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 16:32:14,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1405527509] [2024-11-08 16:32:14,069 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:14,069 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:14,069 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:14,070 INFO L85 PathProgramCache]: Analyzing trace with hash 1664568664, now seen corresponding path program 4 times [2024-11-08 16:32:14,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:14,070 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2141014496] [2024-11-08 16:32:14,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:14,070 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:14,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:14,152 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:14,152 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:14,152 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2141014496] [2024-11-08 16:32:14,153 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2141014496] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:14,153 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:14,153 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 16:32:14,153 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1132731972] [2024-11-08 16:32:14,153 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:14,154 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:14,154 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:14,154 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 16:32:14,154 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 16:32:14,155 INFO L87 Difference]: Start difference. First operand 14871 states and 27497 transitions. cyclomatic complexity: 12627 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:14,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:14,271 INFO L93 Difference]: Finished difference Result 14871 states and 27496 transitions. [2024-11-08 16:32:14,272 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14871 states and 27496 transitions. [2024-11-08 16:32:14,336 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:14,380 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14871 states to 14871 states and 27496 transitions. [2024-11-08 16:32:14,380 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14871 [2024-11-08 16:32:14,392 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14871 [2024-11-08 16:32:14,392 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14871 states and 27496 transitions. [2024-11-08 16:32:14,403 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:14,403 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27496 transitions. [2024-11-08 16:32:14,413 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14871 states and 27496 transitions. [2024-11-08 16:32:14,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14871 to 14871. [2024-11-08 16:32:14,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14871 states, 14871 states have (on average 1.848967789657723) internal successors, (27496), 14870 states have internal predecessors, (27496), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:14,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14871 states to 14871 states and 27496 transitions. [2024-11-08 16:32:14,565 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27496 transitions. [2024-11-08 16:32:14,565 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-08 16:32:14,566 INFO L425 stractBuchiCegarLoop]: Abstraction has 14871 states and 27496 transitions. [2024-11-08 16:32:14,566 INFO L332 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2024-11-08 16:32:14,566 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14871 states and 27496 transitions. [2024-11-08 16:32:14,834 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:14,834 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:14,834 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:14,838 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:14,838 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:14,838 INFO L745 eck$LassoCheckResult]: Stem: 439907#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 439908#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 441033#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 440545#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 440546#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 440739#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 441548#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 439805#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 439806#L458 assume !(0 == getOrigin_~person#1); 441391#L462 assume !(1 == getOrigin_~person#1); 441510#L466 assume !(2 == getOrigin_~person#1); 441137#L470 assume !(3 == getOrigin_~person#1); 441138#L474 assume !(4 == getOrigin_~person#1); 441347#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 439932#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 439933#L1076 assume !(0 == initPersonOnFloor_~floor#1); 441157#L1103 assume 1 == initPersonOnFloor_~floor#1; 441626#L1104 assume !(0 == initPersonOnFloor_~person#1); 441807#L1107 assume !(1 == initPersonOnFloor_~person#1); 441230#L1110 assume !(2 == initPersonOnFloor_~person#1); 441231#L1113 assume !(3 == initPersonOnFloor_~person#1); 441245#L1116 assume !(4 == initPersonOnFloor_~person#1); 440941#L1119 assume !(5 == initPersonOnFloor_~person#1); 439874#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 439875#L868 assume !(0 == callOnFloor_~floorID#1); 441783#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 440022#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 441827#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 441826#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 441825#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 441824#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 441823#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 441073#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 441074#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 440633#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 440634#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 441822#L2413 assume !(0 != timeShift_~tmp___9~2#1); 441709#L2504 assume !(1 == ~doorState~0); 441710#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 440405#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 440406#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 441200#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 441609#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 441699#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 441700#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 441820#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 441815#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 439572#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 441372#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 441576#L2232-2 assume !(1 == ~currentHeading~0); 440501#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 439604#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 439605#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 441498#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 441837#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 440141#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 440142#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 441980#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 441985#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 441983#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 441978#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 441976#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 441977#L198-2 [2024-11-08 16:32:14,839 INFO L747 eck$LassoCheckResult]: Loop: 441977#L198-2 assume !false; 446627#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 446625#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 446623#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 446621#L206 assume 1 != cleanup_~tmp___0~0#1; 446619#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 446617#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 446615#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 446612#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 446613#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 453103#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 453100#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 453098#L805-26 assume !(0 == isFloorCalling_~floorID#1); 453095#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 453090#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 453089#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 441772#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 441773#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 447051#L2415-2 assume !(0 != ~persons_0~0); 447020#L2415-3 assume !(0 != ~persons_1~0); 447012#L2429-1 assume !(0 != ~persons_2~0); 447006#L2443-1 assume !(0 != ~persons_3~0); 446954#L2457-1 assume !(0 != ~persons_4~0); 446951#L2471-1 assume !(0 != ~persons_5~0); 446946#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 446944#L896-12 assume 0 == isPersonOnFloor_~floor#1; 446918#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 446894#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 446889#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 446146#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 446144#L896-14 assume 0 == isPersonOnFloor_~floor#1; 446139#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 446105#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 446103#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 446101#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 446099#L896-16 assume 0 == isPersonOnFloor_~floor#1; 446098#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 446067#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 446066#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 445817#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 445816#L896-18 assume 0 == isPersonOnFloor_~floor#1; 445783#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 445774#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 445771#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 445772#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 445925#L896-20 assume 0 == isPersonOnFloor_~floor#1; 445896#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 445889#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 445887#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 445888#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 446187#L896-22 assume 0 == isPersonOnFloor_~floor#1; 446160#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 446151#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 446149#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 446150#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 445272#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 445260#L852-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 445254#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 445246#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 445232#L1635-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 445230#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 445229#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 445227#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 445228#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 446654#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 446652#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 446649#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 446632#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 446630#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 441977#L198-2 [2024-11-08 16:32:14,839 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:14,839 INFO L85 PathProgramCache]: Analyzing trace with hash 1188772472, now seen corresponding path program 1 times [2024-11-08 16:32:14,840 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:14,840 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1829806382] [2024-11-08 16:32:14,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:14,840 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:14,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:14,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:14,922 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:14,922 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1829806382] [2024-11-08 16:32:14,922 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1829806382] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:14,922 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:14,922 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:32:14,923 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2047340747] [2024-11-08 16:32:14,923 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:14,923 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:14,924 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:14,924 INFO L85 PathProgramCache]: Analyzing trace with hash 1664568664, now seen corresponding path program 5 times [2024-11-08 16:32:14,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:14,924 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [7738948] [2024-11-08 16:32:14,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:14,925 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:14,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:15,019 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:15,019 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:15,020 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [7738948] [2024-11-08 16:32:15,020 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [7738948] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:15,020 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:15,021 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 16:32:15,021 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1884315091] [2024-11-08 16:32:15,021 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:15,021 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:15,022 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:15,022 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-08 16:32:15,023 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-08 16:32:15,023 INFO L87 Difference]: Start difference. First operand 14871 states and 27496 transitions. cyclomatic complexity: 12626 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:15,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:15,131 INFO L93 Difference]: Finished difference Result 14871 states and 27495 transitions. [2024-11-08 16:32:15,132 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14871 states and 27495 transitions. [2024-11-08 16:32:15,224 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:15,291 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14871 states to 14871 states and 27495 transitions. [2024-11-08 16:32:15,292 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14871 [2024-11-08 16:32:15,307 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14871 [2024-11-08 16:32:15,308 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14871 states and 27495 transitions. [2024-11-08 16:32:15,322 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:15,322 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27495 transitions. [2024-11-08 16:32:15,333 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14871 states and 27495 transitions. [2024-11-08 16:32:15,507 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14871 to 14871. [2024-11-08 16:32:15,522 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14871 states, 14871 states have (on average 1.8489005446842848) internal successors, (27495), 14870 states have internal predecessors, (27495), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:15,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14871 states to 14871 states and 27495 transitions. [2024-11-08 16:32:15,568 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27495 transitions. [2024-11-08 16:32:15,569 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-08 16:32:15,569 INFO L425 stractBuchiCegarLoop]: Abstraction has 14871 states and 27495 transitions. [2024-11-08 16:32:15,569 INFO L332 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2024-11-08 16:32:15,569 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14871 states and 27495 transitions. [2024-11-08 16:32:15,633 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2024-11-08 16:32:15,633 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:15,633 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:15,639 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:15,639 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:15,640 INFO L745 eck$LassoCheckResult]: Stem: 469661#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 469662#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 470803#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 470305#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 470306#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 470500#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 471331#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 469556#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 469557#L458 assume !(0 == getOrigin_~person#1); 471167#L462 assume !(1 == getOrigin_~person#1); 471288#L466 assume !(2 == getOrigin_~person#1); 470909#L470 assume !(3 == getOrigin_~person#1); 470910#L474 assume !(4 == getOrigin_~person#1); 471124#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 469686#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 469687#L1076 assume !(0 == initPersonOnFloor_~floor#1); 470930#L1103 assume 1 == initPersonOnFloor_~floor#1; 471414#L1104 assume !(0 == initPersonOnFloor_~person#1); 471618#L1107 assume !(1 == initPersonOnFloor_~person#1); 471003#L1110 assume !(2 == initPersonOnFloor_~person#1); 471004#L1113 assume !(3 == initPersonOnFloor_~person#1); 471018#L1116 assume !(4 == initPersonOnFloor_~person#1); 470706#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 469627#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 469628#L868 assume !(0 == callOnFloor_~floorID#1); 471582#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 469777#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 471649#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 471648#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 471647#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 471646#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 471645#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 470843#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 470844#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 470393#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 470395#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 471643#L2413 assume !(0 != timeShift_~tmp___9~2#1); 471504#L2504 assume !(1 == ~doorState~0); 471505#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 470161#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 470162#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 470972#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 471397#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 471492#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 471493#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 471641#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 471630#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 469323#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 471146#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 471364#L2232-2 assume !(1 == ~currentHeading~0); 470259#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 469355#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 469356#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 471278#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 471681#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 469898#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 469899#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 469965#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 469753#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 470435#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 477870#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 477868#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 477866#L198-2 [2024-11-08 16:32:15,641 INFO L747 eck$LassoCheckResult]: Loop: 477866#L198-2 assume !false; 477865#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 471796#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 471795#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 471777#L206 assume 1 != cleanup_~tmp___0~0#1; 471776#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 471655#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 471654#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 471652#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 471653#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 483056#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 483055#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 483054#L805-26 assume !(0 == isFloorCalling_~floorID#1); 480578#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 480568#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 480566#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 479318#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 480565#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 471688#L2415-2 assume !(0 != ~persons_0~0); 480527#L2415-3 assume !(0 != ~persons_1~0); 480519#L2429-1 assume !(0 != ~persons_2~0); 480513#L2443-1 assume !(0 != ~persons_3~0); 480490#L2457-1 assume !(0 != ~persons_4~0); 480488#L2471-1 assume !(0 != ~persons_5~0); 480484#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 480483#L896-12 assume 0 == isPersonOnFloor_~floor#1; 480470#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 480447#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 480444#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 469670#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 469671#L896-14 assume 0 == isPersonOnFloor_~floor#1; 481693#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 481665#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 481663#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 481664#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 482311#L896-16 assume 0 == isPersonOnFloor_~floor#1; 482310#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 482273#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 482271#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 482269#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 482268#L896-18 assume 0 == isPersonOnFloor_~floor#1; 482235#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 482232#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 482231#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 470215#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 470010#L896-20 assume 0 == isPersonOnFloor_~floor#1; 470011#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 469622#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 469798#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 469799#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 482968#L896-22 assume 0 == isPersonOnFloor_~floor#1; 480022#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 469723#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 469724#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 470347#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 470709#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 471559#L852-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 479767#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 479764#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 478031#L1635-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 469354#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 479761#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 479760#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 478067#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 478006#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 477999#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 477997#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 477908#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 477867#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 477866#L198-2 [2024-11-08 16:32:15,641 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:15,642 INFO L85 PathProgramCache]: Analyzing trace with hash -1734387526, now seen corresponding path program 1 times [2024-11-08 16:32:15,642 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:15,642 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [178430208] [2024-11-08 16:32:15,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:15,642 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:15,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:15,713 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:15,713 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:15,713 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [178430208] [2024-11-08 16:32:15,713 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [178430208] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:15,714 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:15,714 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-08 16:32:15,714 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1861004365] [2024-11-08 16:32:15,714 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:15,714 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:15,715 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:15,715 INFO L85 PathProgramCache]: Analyzing trace with hash -2140271334, now seen corresponding path program 5 times [2024-11-08 16:32:15,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:15,715 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1196043618] [2024-11-08 16:32:15,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:15,716 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:15,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:15,846 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:15,846 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:15,846 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1196043618] [2024-11-08 16:32:15,846 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1196043618] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:15,847 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:15,847 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:15,847 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1475414546] [2024-11-08 16:32:15,847 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:15,848 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:15,848 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:15,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-08 16:32:15,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-08 16:32:15,849 INFO L87 Difference]: Start difference. First operand 14871 states and 27495 transitions. cyclomatic complexity: 12625 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 2 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:15,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:15,997 INFO L93 Difference]: Finished difference Result 15094 states and 27836 transitions. [2024-11-08 16:32:15,997 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15094 states and 27836 transitions. [2024-11-08 16:32:16,094 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12039 [2024-11-08 16:32:16,157 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15094 states to 15094 states and 27836 transitions. [2024-11-08 16:32:16,157 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15094 [2024-11-08 16:32:16,173 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15094 [2024-11-08 16:32:16,173 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15094 states and 27836 transitions. [2024-11-08 16:32:16,187 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:16,187 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15094 states and 27836 transitions. [2024-11-08 16:32:16,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15094 states and 27836 transitions. [2024-11-08 16:32:16,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15094 to 15063. [2024-11-08 16:32:16,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15063 states, 15063 states have (on average 1.8458474407488548) internal successors, (27804), 15062 states have internal predecessors, (27804), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:16,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15063 states to 15063 states and 27804 transitions. [2024-11-08 16:32:16,575 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15063 states and 27804 transitions. [2024-11-08 16:32:16,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-08 16:32:16,576 INFO L425 stractBuchiCegarLoop]: Abstraction has 15063 states and 27804 transitions. [2024-11-08 16:32:16,576 INFO L332 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2024-11-08 16:32:16,576 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15063 states and 27804 transitions. [2024-11-08 16:32:16,624 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12008 [2024-11-08 16:32:16,624 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:16,625 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:16,629 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:16,630 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:16,630 INFO L745 eck$LassoCheckResult]: Stem: 499636#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 499637#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 500784#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 500279#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 500280#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 500478#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 501320#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 499533#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 499534#L458 assume !(0 == getOrigin_~person#1); 501152#L462 assume !(1 == getOrigin_~person#1); 501277#L466 assume !(2 == getOrigin_~person#1); 500894#L470 assume !(3 == getOrigin_~person#1); 500895#L474 assume !(4 == getOrigin_~person#1); 501107#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 499661#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 499662#L1076 assume !(0 == initPersonOnFloor_~floor#1); 500913#L1103 assume 1 == initPersonOnFloor_~floor#1; 501406#L1104 assume !(0 == initPersonOnFloor_~person#1); 501628#L1107 assume !(1 == initPersonOnFloor_~person#1); 500985#L1110 assume !(2 == initPersonOnFloor_~person#1); 500986#L1113 assume !(3 == initPersonOnFloor_~person#1); 500999#L1116 assume !(4 == initPersonOnFloor_~person#1); 500688#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 499605#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 499606#L868 assume !(0 == callOnFloor_~floorID#1); 501582#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 499753#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 501664#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 501663#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 501662#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 501661#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 501660#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 500826#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 500827#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 500366#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 500368#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 501658#L2413 assume !(0 != timeShift_~tmp___9~2#1); 501496#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 501497#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 500138#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 500139#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 500954#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 501384#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 501484#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 501485#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 501656#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 501644#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 499299#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 501131#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 501351#L2232-2 assume !(1 == ~currentHeading~0); 500235#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 499331#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 499332#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 501265#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 506119#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 499874#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 499875#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 507662#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 507667#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 507665#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 507627#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 507618#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 507615#L198-2 [2024-11-08 16:32:16,630 INFO L747 eck$LassoCheckResult]: Loop: 507615#L198-2 assume !false; 507614#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 507613#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 507612#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 507611#L206 assume 1 != cleanup_~tmp___0~0#1; 507610#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 507609#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 507608#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 507606#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 507607#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 499867#L805-22 assume !(0 == isFloorCalling_~floorID#1); 499448#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 499450#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 501297#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 499511#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 513524#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 513518#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 513515#L805-26 assume !(0 == isFloorCalling_~floorID#1); 508338#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 508326#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 508315#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 508312#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 508309#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 508304#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 508301#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 508265#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 501858#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 501854#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 501852#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 501847#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 501848#L2025-2 assume !(0 == ~currentFloorID~0); 501857#L2031-2 assume ~currentFloorID~0 > 0; 501807#L2032-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 501803#L805-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 501800#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret38#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1; 501801#L2036-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 502132#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 502129#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 502126#L2232-3 assume !(1 == ~currentHeading~0); 502124#L2242-9 assume !(0 == ~currentFloorID~0); 502121#L2242-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 502054#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 502052#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 502050#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 502049#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 502024#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 502019#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 502009#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 502001#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 501999#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 501997#L198-2 assume !false; 501995#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 501993#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 501991#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 501989#L206 assume 1 != cleanup_~tmp___0~0#1; 501987#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 501984#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 501981#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 501978#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 501972#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 501971#L805-22 assume !(0 == isFloorCalling_~floorID#1); 501962#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 501957#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 501928#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 501912#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 501910#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 501908#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 501905#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 501903#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 501901#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 501899#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 501897#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 501895#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 501892#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 501890#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 501887#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 501885#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 501884#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 501588#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 501589#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 501375#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 501376#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 501475#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 506078#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 501555#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 501556#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 507773#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 507771#L2232-5 assume !(1 == ~currentHeading~0); 507766#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 507763#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 507760#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 507758#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 507757#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 507756#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 507755#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 507648#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 507644#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 507642#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 507625#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 507617#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 507615#L198-2 [2024-11-08 16:32:16,631 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:16,631 INFO L85 PathProgramCache]: Analyzing trace with hash -1874936136, now seen corresponding path program 1 times [2024-11-08 16:32:16,632 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:16,632 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1995235053] [2024-11-08 16:32:16,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:16,632 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:16,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:16,713 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:16,713 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:16,713 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1995235053] [2024-11-08 16:32:16,714 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1995235053] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:16,714 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:16,714 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:32:16,714 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [205979] [2024-11-08 16:32:16,714 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:16,715 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:16,715 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:16,715 INFO L85 PathProgramCache]: Analyzing trace with hash -836114532, now seen corresponding path program 1 times [2024-11-08 16:32:16,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:16,715 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1743006454] [2024-11-08 16:32:16,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:16,716 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:16,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:16,822 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-08 16:32:16,822 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:16,822 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1743006454] [2024-11-08 16:32:16,822 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1743006454] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:16,822 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:16,823 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:16,823 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [53413077] [2024-11-08 16:32:16,823 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:16,823 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:16,823 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:16,823 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 16:32:16,823 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 16:32:16,824 INFO L87 Difference]: Start difference. First operand 15063 states and 27804 transitions. cyclomatic complexity: 12742 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:17,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:17,087 INFO L93 Difference]: Finished difference Result 26816 states and 49454 transitions. [2024-11-08 16:32:17,088 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26816 states and 49454 transitions. [2024-11-08 16:32:17,221 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23737 [2024-11-08 16:32:17,315 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26816 states to 26816 states and 49454 transitions. [2024-11-08 16:32:17,315 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26816 [2024-11-08 16:32:17,339 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26816 [2024-11-08 16:32:17,339 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26816 states and 49454 transitions. [2024-11-08 16:32:17,358 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:17,358 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26816 states and 49454 transitions. [2024-11-08 16:32:17,375 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26816 states and 49454 transitions. [2024-11-08 16:32:18,016 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26816 to 26806. [2024-11-08 16:32:18,070 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26806 states, 26806 states have (on average 1.844325897187197) internal successors, (49439), 26805 states have internal predecessors, (49439), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:18,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26806 states to 26806 states and 49439 transitions. [2024-11-08 16:32:18,218 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26806 states and 49439 transitions. [2024-11-08 16:32:18,219 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-08 16:32:18,219 INFO L425 stractBuchiCegarLoop]: Abstraction has 26806 states and 49439 transitions. [2024-11-08 16:32:18,219 INFO L332 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2024-11-08 16:32:18,219 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26806 states and 49439 transitions. [2024-11-08 16:32:18,312 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23727 [2024-11-08 16:32:18,312 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:18,312 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:18,323 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:18,323 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:18,324 INFO L745 eck$LassoCheckResult]: Stem: 541527#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 541528#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 542677#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 542172#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 542173#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 542370#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 543226#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 541424#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 541425#L458 assume !(0 == getOrigin_~person#1); 543052#L462 assume !(1 == getOrigin_~person#1); 543181#L466 assume !(2 == getOrigin_~person#1); 542787#L470 assume !(3 == getOrigin_~person#1); 542788#L474 assume !(4 == getOrigin_~person#1); 543007#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 541552#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 541553#L1076 assume !(0 == initPersonOnFloor_~floor#1); 542805#L1103 assume 1 == initPersonOnFloor_~floor#1; 543304#L1104 assume !(0 == initPersonOnFloor_~person#1); 543508#L1107 assume !(1 == initPersonOnFloor_~person#1); 542877#L1110 assume !(2 == initPersonOnFloor_~person#1); 542878#L1113 assume !(3 == initPersonOnFloor_~person#1); 542893#L1116 assume !(4 == initPersonOnFloor_~person#1); 542582#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 541496#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 541497#L868 assume !(0 == callOnFloor_~floorID#1); 543470#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 541642#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 543533#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 543532#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 543531#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 543530#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 543529#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 542716#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 542717#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 542260#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 542261#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 543528#L2413 assume !(0 != timeShift_~tmp___9~2#1); 543390#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 543391#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 542029#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 542030#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 542845#L1860 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 542846#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 543288#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 543379#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 543380#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 543526#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 543519#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 541192#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 543031#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 543254#L2232-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 543429#isTopFloor_returnLabel#5 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 543436#L2236-6 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 543507#L2242-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 541225#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 550660#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 550659#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 550658#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 550657#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 550643#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 550648#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 550646#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 550641#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 550634#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 550631#L198-2 [2024-11-08 16:32:18,324 INFO L747 eck$LassoCheckResult]: Loop: 550631#L198-2 assume !false; 550629#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 550628#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 550627#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 550626#L206 assume 1 != cleanup_~tmp___0~0#1; 550625#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 550624#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 550623#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 550621#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 550619#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 550620#L805-22 assume !(0 == isFloorCalling_~floorID#1); 551914#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 551905#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 544991#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 544985#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 544984#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 544982#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 544980#L805-26 assume !(0 == isFloorCalling_~floorID#1); 544803#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 544791#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 544784#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 544675#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 544671#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 544663#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 544661#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 544658#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 544654#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 544648#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 544646#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 544645#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 544644#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 544642#L1860-2 assume !(0 != stopRequestedInDirection_~tmp~13#1); 544640#L1866-2 assume ~currentFloorID~0 < 0; 544638#L1867-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 544639#L805-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 544641#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret33#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 544636#L1871-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 544637#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 544951#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 552661#L2232-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 552658#isTopFloor_returnLabel#7 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 552654#L2236-9 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 552651#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 552648#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 552647#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 552646#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 552645#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 552643#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 552640#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 552632#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 552625#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 552624#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 552623#L198-2 assume !false; 544937#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 544938#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 544931#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 544932#L206 assume 1 != cleanup_~tmp___0~0#1; 544926#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 544927#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 544787#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 544788#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 552615#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 552611#L805-22 assume !(0 == isFloorCalling_~floorID#1); 552607#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 552590#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 552591#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 552210#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 552211#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 552204#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 552205#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 552592#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 552874#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 552873#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 552872#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 552870#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 552869#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 552867#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 552866#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 552864#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 552863#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 552860#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 552752#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 552859#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 552735#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 552857#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 552855#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 552792#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 552741#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 552738#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 552732#L2232-5 assume !(1 == ~currentHeading~0); 552729#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 550691#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 550688#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 550684#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 550683#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 550681#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 550679#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 550676#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 550672#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 550670#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 550667#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 550633#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 550631#L198-2 [2024-11-08 16:32:18,325 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:18,326 INFO L85 PathProgramCache]: Analyzing trace with hash 739474664, now seen corresponding path program 1 times [2024-11-08 16:32:18,326 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:18,326 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [560500769] [2024-11-08 16:32:18,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:18,326 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:18,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:18,449 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:18,449 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:18,450 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [560500769] [2024-11-08 16:32:18,450 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [560500769] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:18,450 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:18,450 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 16:32:18,450 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1531191095] [2024-11-08 16:32:18,451 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:18,451 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:18,451 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:18,451 INFO L85 PathProgramCache]: Analyzing trace with hash -620662447, now seen corresponding path program 1 times [2024-11-08 16:32:18,452 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:18,452 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1413869342] [2024-11-08 16:32:18,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:18,452 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:18,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:18,567 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-11-08 16:32:18,568 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:18,568 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1413869342] [2024-11-08 16:32:18,568 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1413869342] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:18,568 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:18,568 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:18,569 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [546596509] [2024-11-08 16:32:18,569 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:18,569 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:18,569 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:18,569 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-08 16:32:18,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-08 16:32:18,570 INFO L87 Difference]: Start difference. First operand 26806 states and 49439 transitions. cyclomatic complexity: 22634 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:18,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:18,874 INFO L93 Difference]: Finished difference Result 26816 states and 49426 transitions. [2024-11-08 16:32:18,874 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26816 states and 49426 transitions. [2024-11-08 16:32:19,001 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23737 [2024-11-08 16:32:19,089 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26816 states to 26816 states and 49426 transitions. [2024-11-08 16:32:19,090 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26816 [2024-11-08 16:32:19,116 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26816 [2024-11-08 16:32:19,116 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26816 states and 49426 transitions. [2024-11-08 16:32:19,138 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:19,138 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26816 states and 49426 transitions. [2024-11-08 16:32:19,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26816 states and 49426 transitions. [2024-11-08 16:32:19,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26816 to 26806. [2024-11-08 16:32:19,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26806 states, 26806 states have (on average 1.8432813549205402) internal successors, (49411), 26805 states have internal predecessors, (49411), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:19,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26806 states to 26806 states and 49411 transitions. [2024-11-08 16:32:19,903 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26806 states and 49411 transitions. [2024-11-08 16:32:19,904 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-08 16:32:19,904 INFO L425 stractBuchiCegarLoop]: Abstraction has 26806 states and 49411 transitions. [2024-11-08 16:32:19,904 INFO L332 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2024-11-08 16:32:19,904 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26806 states and 49411 transitions. [2024-11-08 16:32:19,995 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23727 [2024-11-08 16:32:19,995 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:19,995 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:20,003 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:20,004 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:20,004 INFO L745 eck$LassoCheckResult]: Stem: 595163#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 595164#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 596318#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 595807#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 595808#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 596010#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 596852#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 595059#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 595060#L458 assume !(0 == getOrigin_~person#1); 596683#L462 assume !(1 == getOrigin_~person#1); 596807#L466 assume !(2 == getOrigin_~person#1); 596419#L470 assume !(3 == getOrigin_~person#1); 596420#L474 assume !(4 == getOrigin_~person#1); 596633#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 595188#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 595189#L1076 assume !(0 == initPersonOnFloor_~floor#1); 596438#L1103 assume 1 == initPersonOnFloor_~floor#1; 596937#L1104 assume !(0 == initPersonOnFloor_~person#1); 597139#L1107 assume !(1 == initPersonOnFloor_~person#1); 596510#L1110 assume !(2 == initPersonOnFloor_~person#1); 596511#L1113 assume !(3 == initPersonOnFloor_~person#1); 596525#L1116 assume !(4 == initPersonOnFloor_~person#1); 596221#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 595132#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 595133#L868 assume !(0 == callOnFloor_~floorID#1); 597102#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 595278#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 597161#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 597160#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 597159#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 597158#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 597157#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 596357#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 596358#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 595896#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 595897#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 597156#L2413 assume !(0 != timeShift_~tmp___9~2#1); 597031#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 597032#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 595664#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 595665#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 596479#L1860 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 596480#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 596919#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 597016#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 597017#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 597154#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 597146#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 594827#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 596661#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 596883#L2232-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 597067#isTopFloor_returnLabel#5 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 597075#L2236-6 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 594857#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 594858#L2248-5 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 596733#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 596476#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 596477#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 597815#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 597801#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 597806#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 597804#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 597799#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 597797#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 597798#L198-2 [2024-11-08 16:32:20,005 INFO L747 eck$LassoCheckResult]: Loop: 597798#L198-2 assume !false; 604161#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 604160#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 604159#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 604158#L206 assume 1 != cleanup_~tmp___0~0#1; 604157#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 604156#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 604155#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 604154#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 604152#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 604151#L805-22 assume !(0 == isFloorCalling_~floorID#1); 604150#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 597230#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 597231#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 598310#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 598311#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 597210#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 597209#L805-26 assume !(0 == isFloorCalling_~floorID#1); 597208#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 597205#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 597199#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 597201#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 597786#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 597191#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 597192#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 597187#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 597185#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 597184#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 597182#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 597180#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 597178#L2025-2 assume !(0 == ~currentFloorID~0); 597175#L2031-2 assume ~currentFloorID~0 > 0; 597173#L2032-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 597174#L805-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 597179#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret38#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1; 597171#L2036-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 597172#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 597863#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 597857#L2232-3 assume !(1 == ~currentHeading~0); 597848#L2242-9 assume !(0 == ~currentFloorID~0); 597845#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 597842#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 597841#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 597840#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 597839#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 597838#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 597837#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 597832#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 597821#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 597796#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 597793#L198-2 assume !false; 597792#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 597791#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 597790#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 597789#L206 assume 1 != cleanup_~tmp___0~0#1; 597774#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 597768#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 597763#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 597261#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 597259#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 597258#L805-22 assume !(0 == isFloorCalling_~floorID#1); 597250#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 597247#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 597221#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 597217#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 598308#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 598309#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 604114#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 604112#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 604110#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 604108#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 604106#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 604103#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 604101#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 604099#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 604098#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 604094#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 604093#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 597105#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 597106#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 603951#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 603911#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 603903#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 603898#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 603875#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 603874#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 603872#L2521-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 598369#L2287-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 598370#getReverseHeading_returnLabel#4 timeShift_#t~ret68#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 598364#L2232-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 598361#isTopFloor_returnLabel#9 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 598357#L2236-12 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 598352#L2242-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 598349#L2248-9 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 598346#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 598345#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 598343#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 598344#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 604169#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 604166#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 604165#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 604163#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 604162#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 597798#L198-2 [2024-11-08 16:32:20,006 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:20,006 INFO L85 PathProgramCache]: Analyzing trace with hash 1440539242, now seen corresponding path program 1 times [2024-11-08 16:32:20,006 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:20,006 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [245128062] [2024-11-08 16:32:20,006 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:20,007 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:20,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:20,167 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:20,167 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:20,167 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [245128062] [2024-11-08 16:32:20,167 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [245128062] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:20,167 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:20,168 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 16:32:20,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1063122335] [2024-11-08 16:32:20,168 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:20,168 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:20,169 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:20,169 INFO L85 PathProgramCache]: Analyzing trace with hash 1317701927, now seen corresponding path program 1 times [2024-11-08 16:32:20,169 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:20,169 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [184118612] [2024-11-08 16:32:20,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:20,170 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:20,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:20,294 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-08 16:32:20,294 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:20,294 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [184118612] [2024-11-08 16:32:20,295 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [184118612] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:20,295 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:20,295 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:20,295 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [424654452] [2024-11-08 16:32:20,295 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:20,296 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:20,296 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:20,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-08 16:32:20,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-08 16:32:20,297 INFO L87 Difference]: Start difference. First operand 26806 states and 49411 transitions. cyclomatic complexity: 22606 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:20,935 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:20,935 INFO L93 Difference]: Finished difference Result 30461 states and 56159 transitions. [2024-11-08 16:32:20,935 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30461 states and 56159 transitions. [2024-11-08 16:32:21,055 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 27261 [2024-11-08 16:32:21,130 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30461 states to 30461 states and 56159 transitions. [2024-11-08 16:32:21,130 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30461 [2024-11-08 16:32:21,150 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30461 [2024-11-08 16:32:21,150 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30461 states and 56159 transitions. [2024-11-08 16:32:21,165 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:21,165 INFO L218 hiAutomatonCegarLoop]: Abstraction has 30461 states and 56159 transitions. [2024-11-08 16:32:21,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30461 states and 56159 transitions. [2024-11-08 16:32:21,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30461 to 30335. [2024-11-08 16:32:21,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30335 states, 30335 states have (on average 1.8447997362782265) internal successors, (55962), 30334 states have internal predecessors, (55962), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:21,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30335 states to 30335 states and 55962 transitions. [2024-11-08 16:32:21,958 INFO L240 hiAutomatonCegarLoop]: Abstraction has 30335 states and 55962 transitions. [2024-11-08 16:32:21,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-08 16:32:21,959 INFO L425 stractBuchiCegarLoop]: Abstraction has 30335 states and 55962 transitions. [2024-11-08 16:32:21,959 INFO L332 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2024-11-08 16:32:21,959 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30335 states and 55962 transitions. [2024-11-08 16:32:22,057 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 27190 [2024-11-08 16:32:22,057 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:22,057 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:22,065 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:22,065 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:22,065 INFO L745 eck$LassoCheckResult]: Stem: 652447#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 652448#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 653589#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 653089#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 653090#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 653287#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 654131#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 652342#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 652343#L458 assume !(0 == getOrigin_~person#1); 653956#L462 assume !(1 == getOrigin_~person#1); 654091#L466 assume !(2 == getOrigin_~person#1); 653697#L470 assume !(3 == getOrigin_~person#1); 653698#L474 assume !(4 == getOrigin_~person#1); 653909#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 652472#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 652473#L1076 assume !(0 == initPersonOnFloor_~floor#1); 653717#L1103 assume 1 == initPersonOnFloor_~floor#1; 654221#L1104 assume !(0 == initPersonOnFloor_~person#1); 654426#L1107 assume !(1 == initPersonOnFloor_~person#1); 653788#L1110 assume !(2 == initPersonOnFloor_~person#1); 653789#L1113 assume !(3 == initPersonOnFloor_~person#1); 653803#L1116 assume !(4 == initPersonOnFloor_~person#1); 653495#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 652414#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 652415#L868 assume !(0 == callOnFloor_~floorID#1); 654389#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 652563#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 654461#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 654460#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 654459#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 654458#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 654457#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 653630#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 653631#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 653179#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 653181#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 654455#L2413 assume !(0 != timeShift_~tmp___9~2#1); 654305#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 654306#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 652946#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 652947#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 653758#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 652361#L1866 assume !(~currentFloorID~0 < 0); 652362#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 654213#$Ultimate##2076 assume ~currentFloorID~0 < 1; 652931#L1896 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 652932#$Ultimate##2092 assume ~currentFloorID~0 < 1; 654080#L1912 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 654082#L1913 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 652435#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 654454#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 654451#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 653246#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 653247#L2236 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 653596#L2242-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 654078#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 654079#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 654475#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 654476#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 656255#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 656241#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 656246#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 656244#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 656239#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 656238#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 656231#L198-2 [2024-11-08 16:32:22,066 INFO L747 eck$LassoCheckResult]: Loop: 656231#L198-2 assume !false; 656228#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 656227#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 656182#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 656176#L206 assume 1 != cleanup_~tmp___0~0#1; 656171#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 656170#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 656169#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 655096#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 654509#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 654510#L805-22 assume !(0 == isFloorCalling_~floorID#1); 671411#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 671407#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 671402#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 671397#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 671396#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 671395#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 670877#L805-26 assume !(0 == isFloorCalling_~floorID#1); 654031#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 654032#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 656235#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 656230#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 656201#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 656184#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 656179#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 656174#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 655240#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 655238#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 655236#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 655234#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 655233#L2025-2 assume !(0 == ~currentFloorID~0); 655232#L2031-2 assume ~currentFloorID~0 > 0; 655230#L2032-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 655231#L805-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 655239#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret38#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1; 655229#L2036-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 653362#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 656301#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 655093#L2232-3 assume !(1 == ~currentHeading~0); 655094#L2242-9 assume !(0 == ~currentFloorID~0); 656285#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 656282#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 656281#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 656280#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 656279#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 656278#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 656277#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 656272#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 656273#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 656814#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 656813#L198-2 assume !false; 656812#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 656811#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 656810#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 656809#L206 assume 1 != cleanup_~tmp___0~0#1; 656808#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 656807#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 656806#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 656805#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 656803#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 656802#L805-22 assume !(0 == isFloorCalling_~floorID#1); 656801#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 656797#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 656537#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 656531#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 656529#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 656527#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 656524#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 656522#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 656520#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 656518#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 656516#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 656513#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 656511#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 656508#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 656507#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 656505#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 656504#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 654391#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 653835#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 653836#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 654286#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 654288#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 670884#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 654371#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 652422#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 652598#L2521-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 652600#L2287-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 653742#getReverseHeading_returnLabel#4 timeShift_#t~ret68#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 653368#L2232-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 653370#isTopFloor_returnLabel#9 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 654337#L2236-12 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 654338#L2242-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 660031#L2248-9 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 660022#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 660020#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 659982#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 659981#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 659979#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 659980#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 656275#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 656258#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 656237#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 656231#L198-2 [2024-11-08 16:32:22,067 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:22,067 INFO L85 PathProgramCache]: Analyzing trace with hash -1293482042, now seen corresponding path program 1 times [2024-11-08 16:32:22,067 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:22,068 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [904860814] [2024-11-08 16:32:22,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:22,069 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:22,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:22,213 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:22,213 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:22,214 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [904860814] [2024-11-08 16:32:22,214 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [904860814] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:22,214 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:22,214 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 16:32:22,214 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1215978838] [2024-11-08 16:32:22,215 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:22,215 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:22,215 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:22,215 INFO L85 PathProgramCache]: Analyzing trace with hash 827574629, now seen corresponding path program 1 times [2024-11-08 16:32:22,216 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:22,216 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [135923033] [2024-11-08 16:32:22,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:22,216 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:22,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:22,366 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-08 16:32:22,366 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:22,367 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [135923033] [2024-11-08 16:32:22,367 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [135923033] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:22,367 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:22,367 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:22,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685906450] [2024-11-08 16:32:22,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:22,368 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:22,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:22,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-08 16:32:22,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-08 16:32:22,369 INFO L87 Difference]: Start difference. First operand 30335 states and 55962 transitions. cyclomatic complexity: 25629 Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:22,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:22,737 INFO L93 Difference]: Finished difference Result 30452 states and 55995 transitions. [2024-11-08 16:32:22,737 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30452 states and 55995 transitions. [2024-11-08 16:32:22,896 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 27304 [2024-11-08 16:32:23,001 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30452 states to 30452 states and 55995 transitions. [2024-11-08 16:32:23,001 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30452 [2024-11-08 16:32:23,031 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30452 [2024-11-08 16:32:23,031 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30452 states and 55995 transitions. [2024-11-08 16:32:23,056 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:23,057 INFO L218 hiAutomatonCegarLoop]: Abstraction has 30452 states and 55995 transitions. [2024-11-08 16:32:23,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30452 states and 55995 transitions. [2024-11-08 16:32:23,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30452 to 30335. [2024-11-08 16:32:23,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30335 states, 30335 states have (on average 1.839261579034119) internal successors, (55794), 30334 states have internal predecessors, (55794), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:23,858 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30335 states to 30335 states and 55794 transitions. [2024-11-08 16:32:23,859 INFO L240 hiAutomatonCegarLoop]: Abstraction has 30335 states and 55794 transitions. [2024-11-08 16:32:23,859 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-08 16:32:23,859 INFO L425 stractBuchiCegarLoop]: Abstraction has 30335 states and 55794 transitions. [2024-11-08 16:32:23,860 INFO L332 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2024-11-08 16:32:23,860 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30335 states and 55794 transitions. [2024-11-08 16:32:23,933 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 27190 [2024-11-08 16:32:23,933 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:23,933 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:23,939 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:23,939 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:23,939 INFO L745 eck$LassoCheckResult]: Stem: 713248#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 713249#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 714384#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 713888#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 713889#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 714085#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 714921#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 713143#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 713144#L458 assume !(0 == getOrigin_~person#1); 714748#L462 assume !(1 == getOrigin_~person#1); 714876#L466 assume !(2 == getOrigin_~person#1); 714494#L470 assume !(3 == getOrigin_~person#1); 714495#L474 assume !(4 == getOrigin_~person#1); 714706#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 713272#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 713273#L1076 assume !(0 == initPersonOnFloor_~floor#1); 714512#L1103 assume 1 == initPersonOnFloor_~floor#1; 715002#L1104 assume !(0 == initPersonOnFloor_~person#1); 715205#L1107 assume !(1 == initPersonOnFloor_~person#1); 714582#L1110 assume !(2 == initPersonOnFloor_~person#1); 714583#L1113 assume !(3 == initPersonOnFloor_~person#1); 714597#L1116 assume !(4 == initPersonOnFloor_~person#1); 714289#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 713215#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 713216#L868 assume !(0 == callOnFloor_~floorID#1); 715165#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 713362#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 715234#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 715233#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 715232#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 715231#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 715230#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 714425#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 714426#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 713976#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 713978#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 715228#L2413 assume !(0 != timeShift_~tmp___9~2#1); 715084#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 715085#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 713745#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 713746#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 714552#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 713161#L1866 assume !(~currentFloorID~0 < 0); 713162#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 714996#$Ultimate##2076 assume ~currentFloorID~0 < 1; 713731#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 713167#L805-2 assume !(0 == isFloorCalling_~floorID#1); 713168#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 713983#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 713984#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 713236#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 715227#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 715223#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 714044#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 714045#L2236 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 714391#L2242-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 715235#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 722189#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 722188#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 722187#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 722186#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 722169#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 722174#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 722172#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 722166#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 722164#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 722162#L198-2 [2024-11-08 16:32:23,939 INFO L747 eck$LassoCheckResult]: Loop: 722162#L198-2 assume !false; 722161#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 722154#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 722152#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 722151#L206 assume 1 != cleanup_~tmp___0~0#1; 722150#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 722139#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 722138#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 722136#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 722134#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 722133#L805-22 assume !(0 == isFloorCalling_~floorID#1); 722128#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 722119#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 722106#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 722101#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 722100#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 722048#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 722042#L805-26 assume !(0 == isFloorCalling_~floorID#1); 722040#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 722036#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 722034#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 722035#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 715270#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 715265#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 715262#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 715260#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 715258#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 715257#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 715255#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 715251#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 715252#L2025-2 assume !(0 == ~currentFloorID~0); 715244#L2031-2 assume ~currentFloorID~0 > 0; 715245#L2032-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 722448#L805-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 722447#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret38#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1; 715242#L2036-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 715243#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 717812#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 717806#L2232-3 assume !(1 == ~currentHeading~0); 717797#L2242-9 assume !(0 == ~currentFloorID~0); 717794#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 717790#L2248-7 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 717786#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 717782#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 717779#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 717774#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 717770#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 717729#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 717711#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 717709#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 717707#L198-2 assume !false; 717705#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 717703#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 717701#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 717699#L206 assume 1 != cleanup_~tmp___0~0#1; 717697#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 717695#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 717693#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 717690#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 717688#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 717687#L805-22 assume !(0 == isFloorCalling_~floorID#1); 717678#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 717669#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 717643#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 717632#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 717630#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 717628#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 717625#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 717626#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 730981#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 730966#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 730961#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 730953#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 730946#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 730797#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 730516#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 730513#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 730510#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 730511#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 730551#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 730546#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 730543#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 730544#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 730498#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 730296#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 722230#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 722228#L2521-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 722226#L2287-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 722224#getReverseHeading_returnLabel#4 timeShift_#t~ret68#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 722221#L2232-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 722219#isTopFloor_returnLabel#9 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 722215#L2236-12 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 722213#L2242-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 722212#L2248-9 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 722207#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 722206#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 722204#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 722202#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 722201#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 722200#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 722198#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 722190#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 722163#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 722162#L198-2 [2024-11-08 16:32:23,941 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:23,941 INFO L85 PathProgramCache]: Analyzing trace with hash 490847238, now seen corresponding path program 1 times [2024-11-08 16:32:23,941 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:23,941 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [559253440] [2024-11-08 16:32:23,941 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:23,942 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:23,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:24,151 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:24,151 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:24,152 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [559253440] [2024-11-08 16:32:24,152 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [559253440] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:24,152 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:24,152 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:24,152 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [80902481] [2024-11-08 16:32:24,153 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:24,153 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:24,153 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:24,154 INFO L85 PathProgramCache]: Analyzing trace with hash 827574629, now seen corresponding path program 2 times [2024-11-08 16:32:24,154 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:24,154 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1688148590] [2024-11-08 16:32:24,154 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:24,154 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:24,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:24,270 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-08 16:32:24,270 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:24,270 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1688148590] [2024-11-08 16:32:24,270 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1688148590] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:24,271 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:24,271 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:24,271 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [165247296] [2024-11-08 16:32:24,271 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:24,271 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:24,272 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:24,272 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-08 16:32:24,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2024-11-08 16:32:24,272 INFO L87 Difference]: Start difference. First operand 30335 states and 55794 transitions. cyclomatic complexity: 25461 Second operand has 7 states, 7 states have (on average 9.428571428571429) internal successors, (66), 7 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:25,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:25,168 INFO L93 Difference]: Finished difference Result 31051 states and 56938 transitions. [2024-11-08 16:32:25,168 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31051 states and 56938 transitions. [2024-11-08 16:32:25,272 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 27933 [2024-11-08 16:32:25,342 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31051 states to 31051 states and 56938 transitions. [2024-11-08 16:32:25,342 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31051 [2024-11-08 16:32:25,363 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31051 [2024-11-08 16:32:25,363 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31051 states and 56938 transitions. [2024-11-08 16:32:25,378 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:25,378 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31051 states and 56938 transitions. [2024-11-08 16:32:25,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31051 states and 56938 transitions. [2024-11-08 16:32:26,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31051 to 31004. [2024-11-08 16:32:26,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31004 states, 31004 states have (on average 1.8349567797703523) internal successors, (56891), 31003 states have internal predecessors, (56891), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:26,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31004 states to 31004 states and 56891 transitions. [2024-11-08 16:32:26,200 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31004 states and 56891 transitions. [2024-11-08 16:32:26,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-08 16:32:26,201 INFO L425 stractBuchiCegarLoop]: Abstraction has 31004 states and 56891 transitions. [2024-11-08 16:32:26,201 INFO L332 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2024-11-08 16:32:26,201 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31004 states and 56891 transitions. [2024-11-08 16:32:26,276 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 27886 [2024-11-08 16:32:26,276 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:26,276 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:26,283 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:26,283 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:26,283 INFO L745 eck$LassoCheckResult]: Stem: 774654#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 774655#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 775795#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 775294#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 775295#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 775492#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 776339#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 774548#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 774549#L458 assume !(0 == getOrigin_~person#1); 776164#L462 assume !(1 == getOrigin_~person#1); 776293#L466 assume !(2 == getOrigin_~person#1); 775901#L470 assume !(3 == getOrigin_~person#1); 775902#L474 assume !(4 == getOrigin_~person#1); 776117#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 774678#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 774679#L1076 assume !(0 == initPersonOnFloor_~floor#1); 775919#L1103 assume 1 == initPersonOnFloor_~floor#1; 776430#L1104 assume !(0 == initPersonOnFloor_~person#1); 776645#L1107 assume !(1 == initPersonOnFloor_~person#1); 775989#L1110 assume !(2 == initPersonOnFloor_~person#1); 775990#L1113 assume !(3 == initPersonOnFloor_~person#1); 776005#L1116 assume !(4 == initPersonOnFloor_~person#1); 775698#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 774621#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 774622#L868 assume !(0 == callOnFloor_~floorID#1); 776604#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 774769#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 776681#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 776680#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 776679#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 776678#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 776677#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 775834#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 775835#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 775383#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 775385#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 776675#L2413 assume !(0 != timeShift_~tmp___9~2#1); 776525#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 776526#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 775154#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 775155#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 775958#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 774565#L1866 assume !(~currentFloorID~0 < 0); 774566#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 776424#$Ultimate##2076 assume ~currentFloorID~0 < 1; 775139#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 774571#L805-2 assume !(0 == isFloorCalling_~floorID#1); 774572#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 775390#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 775391#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 774640#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 776674#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 776672#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 775449#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 775450#L2236 assume !(0 != continueInDirection_~tmp~14#1); 775577#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 775578#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 776282#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 776682#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 774888#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 774889#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 780845#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 780850#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 780848#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 780840#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 780839#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 780837#L198-2 [2024-11-08 16:32:26,284 INFO L747 eck$LassoCheckResult]: Loop: 780837#L198-2 assume !false; 780836#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 780835#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 780834#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 780833#L206 assume 1 != cleanup_~tmp___0~0#1; 780832#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 780831#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 780830#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 780828#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 780826#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 780825#L805-22 assume !(0 == isFloorCalling_~floorID#1); 780820#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 780812#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 780776#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 780748#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 780705#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 780706#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 780595#L805-26 assume !(0 == isFloorCalling_~floorID#1); 780589#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 780583#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 780579#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 780576#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 780567#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 780561#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 780557#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 780554#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 777020#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 777018#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 777016#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 777015#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 777014#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 777011#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 777009#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 777007#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 777004#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 777002#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 777001#L1856-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 776985#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 776915#L1860-3 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 776902#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 776897#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 776883#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 776879#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 776872#L2236-15 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 776856#L2242-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 776850#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 776844#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 776843#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 776842#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 776841#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 776826#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 776817#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 776809#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 776807#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 776805#L198-2 assume !false; 776803#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 776801#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 776799#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 776797#L206 assume 1 != cleanup_~tmp___0~0#1; 776795#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 776793#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 776790#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 776785#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 776779#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 776774#L805-22 assume !(0 == isFloorCalling_~floorID#1); 776773#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 776763#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 776735#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 776719#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 776717#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 776715#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 776712#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 776710#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 776708#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 776706#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 776704#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 776702#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 776699#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 776697#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 776694#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 776692#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 776690#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 776607#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 776608#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 789638#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 789636#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 789634#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 789613#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 781709#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 781707#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 781705#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 780689#L2232-5 assume !(1 == ~currentHeading~0); 781109#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 780674#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 780889#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 780887#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 780886#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 780885#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 780884#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 780882#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 780883#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 780870#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 780843#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 780838#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 780837#L198-2 [2024-11-08 16:32:26,285 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:26,285 INFO L85 PathProgramCache]: Analyzing trace with hash 47948098, now seen corresponding path program 1 times [2024-11-08 16:32:26,285 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:26,285 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1632736053] [2024-11-08 16:32:26,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:26,285 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:26,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:26,463 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:26,463 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:26,463 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1632736053] [2024-11-08 16:32:26,463 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1632736053] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:26,464 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:26,464 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 16:32:26,464 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [934118607] [2024-11-08 16:32:26,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:26,464 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:26,465 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:26,466 INFO L85 PathProgramCache]: Analyzing trace with hash 453426716, now seen corresponding path program 1 times [2024-11-08 16:32:26,466 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:26,466 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [956962844] [2024-11-08 16:32:26,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:26,467 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:26,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:26,635 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-11-08 16:32:26,635 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:26,635 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [956962844] [2024-11-08 16:32:26,636 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [956962844] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:26,636 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:26,636 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:26,636 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [294665367] [2024-11-08 16:32:26,636 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:26,637 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:26,637 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:26,637 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-08 16:32:26,638 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-08 16:32:26,638 INFO L87 Difference]: Start difference. First operand 31004 states and 56891 transitions. cyclomatic complexity: 25889 Second operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:27,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:27,854 INFO L93 Difference]: Finished difference Result 54186 states and 98965 transitions. [2024-11-08 16:32:27,854 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 54186 states and 98965 transitions. [2024-11-08 16:32:28,538 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50966 [2024-11-08 16:32:28,737 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 54186 states to 54146 states and 98917 transitions. [2024-11-08 16:32:28,738 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 54146 [2024-11-08 16:32:28,777 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 54146 [2024-11-08 16:32:28,777 INFO L73 IsDeterministic]: Start isDeterministic. Operand 54146 states and 98917 transitions. [2024-11-08 16:32:28,802 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:28,802 INFO L218 hiAutomatonCegarLoop]: Abstraction has 54146 states and 98917 transitions. [2024-11-08 16:32:28,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54146 states and 98917 transitions. [2024-11-08 16:32:29,193 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54146 to 50485. [2024-11-08 16:32:29,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50485 states, 50485 states have (on average 1.8272358126176091) internal successors, (92248), 50484 states have internal predecessors, (92248), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:29,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50485 states to 50485 states and 92248 transitions. [2024-11-08 16:32:29,312 INFO L240 hiAutomatonCegarLoop]: Abstraction has 50485 states and 92248 transitions. [2024-11-08 16:32:29,312 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-08 16:32:29,312 INFO L425 stractBuchiCegarLoop]: Abstraction has 50485 states and 92248 transitions. [2024-11-08 16:32:29,313 INFO L332 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2024-11-08 16:32:29,313 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50485 states and 92248 transitions. [2024-11-08 16:32:29,776 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 47311 [2024-11-08 16:32:29,777 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:29,777 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:29,789 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:29,790 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:29,790 INFO L745 eck$LassoCheckResult]: Stem: 859864#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 859865#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 861009#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 860499#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 860500#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 860698#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 861550#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 859759#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 859760#L458 assume !(0 == getOrigin_~person#1); 861387#L462 assume !(1 == getOrigin_~person#1); 861511#L466 assume !(2 == getOrigin_~person#1); 861123#L470 assume !(3 == getOrigin_~person#1); 861124#L474 assume !(4 == getOrigin_~person#1); 861335#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 859888#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 859889#L1076 assume !(0 == initPersonOnFloor_~floor#1); 861141#L1103 assume 1 == initPersonOnFloor_~floor#1; 861638#L1104 assume !(0 == initPersonOnFloor_~person#1); 861847#L1107 assume !(1 == initPersonOnFloor_~person#1); 861210#L1110 assume !(2 == initPersonOnFloor_~person#1); 861211#L1113 assume !(3 == initPersonOnFloor_~person#1); 861227#L1116 assume !(4 == initPersonOnFloor_~person#1); 860913#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 859833#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 859834#L868 assume !(0 == callOnFloor_~floorID#1); 861809#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 859979#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 861884#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 861883#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 861882#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 861881#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 861880#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 861048#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 861049#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 860589#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 860591#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 861878#L2413 assume !(0 != timeShift_~tmp___9~2#1); 861723#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 861724#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 860359#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 860360#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 861179#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 859777#L1866 assume !(~currentFloorID~0 < 0); 859778#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 861632#$Ultimate##2076 assume ~currentFloorID~0 < 1; 860344#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 859783#L805-2 assume !(0 == isFloorCalling_~floorID#1); 859784#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 860596#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 860597#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 859852#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 861877#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 861875#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 860657#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 860658#L2236 assume !(0 != continueInDirection_~tmp~14#1); 860786#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 860787#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 861435#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 861177#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 860098#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 860099#$Ultimate##2557 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 860166#L611 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 865378#areDoorsOpen_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 865375#L615 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 865370#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 865369#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 865335#L198-2 [2024-11-08 16:32:29,791 INFO L747 eck$LassoCheckResult]: Loop: 865335#L198-2 assume !false; 865326#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 865320#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 865318#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 865317#L206 assume 1 != cleanup_~tmp___0~0#1; 865316#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 865315#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 865308#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 865303#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 865296#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 865293#L805-22 assume !(0 == isFloorCalling_~floorID#1); 865285#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 865282#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 864765#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 864761#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 864695#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 864696#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 863081#L805-26 assume !(0 == isFloorCalling_~floorID#1); 862619#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 862614#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 862611#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 862608#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 862602#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 862596#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 862592#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 862590#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 862586#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 862583#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 862580#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 862578#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 862576#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 862572#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 862570#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 862568#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 862564#L2287-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 862565#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 866592#L1856-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 862559#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 866590#L1860-3 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 862497#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 866588#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 866587#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 866586#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 866585#L2236-15 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 866584#L2242-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 866582#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 866581#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 866580#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 866579#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 866577#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 866578#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 862106#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 862099#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 862062#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 862063#L198-2 assume !false; 862058#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 862059#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 862053#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 862054#L206 assume 1 != cleanup_~tmp___0~0#1; 862047#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 862048#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 862041#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 862042#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 862033#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 862035#L805-22 assume !(0 == isFloorCalling_~floorID#1); 862008#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 862005#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 861958#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 861954#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 861937#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 861938#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 861930#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 861931#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 861924#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 861925#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 861918#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 861919#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 861910#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 861911#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 861903#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 861900#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 861901#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 861813#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 861814#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 883108#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 883107#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 883050#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 883051#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 882885#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 882882#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 882880#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 867039#L2232-5 assume !(1 == ~currentHeading~0); 882813#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 882811#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 877427#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 877424#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 877422#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 877420#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 877418#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 877416#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 877414#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 877411#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 865866#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 865368#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 865335#L198-2 [2024-11-08 16:32:29,793 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:29,793 INFO L85 PathProgramCache]: Analyzing trace with hash -442179200, now seen corresponding path program 1 times [2024-11-08 16:32:29,793 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:29,793 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1971958722] [2024-11-08 16:32:29,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:29,794 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:29,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:29,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 16:32:29,870 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:29,870 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1971958722] [2024-11-08 16:32:29,870 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1971958722] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:29,870 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:29,871 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 16:32:29,871 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [192454876] [2024-11-08 16:32:29,871 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:29,871 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 16:32:29,872 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:29,872 INFO L85 PathProgramCache]: Analyzing trace with hash -1455031074, now seen corresponding path program 1 times [2024-11-08 16:32:29,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:29,872 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [646620517] [2024-11-08 16:32:29,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:29,873 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:29,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:30,018 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-11-08 16:32:30,018 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:30,018 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [646620517] [2024-11-08 16:32:30,018 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [646620517] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:30,019 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:30,019 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:30,019 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [466505116] [2024-11-08 16:32:30,019 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:30,020 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:30,020 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:30,020 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-08 16:32:30,020 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-08 16:32:30,021 INFO L87 Difference]: Start difference. First operand 50485 states and 92248 transitions. cyclomatic complexity: 41765 Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:30,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:30,529 INFO L93 Difference]: Finished difference Result 100137 states and 183019 transitions. [2024-11-08 16:32:30,530 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 100137 states and 183019 transitions. [2024-11-08 16:32:31,093 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 94486 [2024-11-08 16:32:31,480 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 100137 states to 100137 states and 183019 transitions. [2024-11-08 16:32:31,480 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 100137 [2024-11-08 16:32:32,195 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 100137 [2024-11-08 16:32:32,195 INFO L73 IsDeterministic]: Start isDeterministic. Operand 100137 states and 183019 transitions. [2024-11-08 16:32:32,314 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:32,317 INFO L218 hiAutomatonCegarLoop]: Abstraction has 100137 states and 183019 transitions. [2024-11-08 16:32:32,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100137 states and 183019 transitions. [2024-11-08 16:32:33,023 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100137 to 100137. [2024-11-08 16:32:33,090 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100137 states, 100137 states have (on average 1.827686070083985) internal successors, (183019), 100136 states have internal predecessors, (183019), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:34,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100137 states to 100137 states and 183019 transitions. [2024-11-08 16:32:34,069 INFO L240 hiAutomatonCegarLoop]: Abstraction has 100137 states and 183019 transitions. [2024-11-08 16:32:34,070 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-08 16:32:34,070 INFO L425 stractBuchiCegarLoop]: Abstraction has 100137 states and 183019 transitions. [2024-11-08 16:32:34,073 INFO L332 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2024-11-08 16:32:34,074 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 100137 states and 183019 transitions. [2024-11-08 16:32:34,290 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 94486 [2024-11-08 16:32:34,290 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:34,290 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:34,315 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:34,315 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:34,315 INFO L745 eck$LassoCheckResult]: Stem: 1010498#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1010499#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1011640#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1011133#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1011134#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1011336#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1012183#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1010391#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1010392#L458 assume !(0 == getOrigin_~person#1); 1012013#L462 assume !(1 == getOrigin_~person#1); 1012138#L466 assume !(2 == getOrigin_~person#1); 1011750#L470 assume !(3 == getOrigin_~person#1); 1011751#L474 assume !(4 == getOrigin_~person#1); 1011967#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1010522#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1010523#L1076 assume !(0 == initPersonOnFloor_~floor#1); 1011768#L1103 assume 1 == initPersonOnFloor_~floor#1; 1012267#L1104 assume !(0 == initPersonOnFloor_~person#1); 1012488#L1107 assume !(1 == initPersonOnFloor_~person#1); 1011839#L1110 assume !(2 == initPersonOnFloor_~person#1); 1011840#L1113 assume !(3 == initPersonOnFloor_~person#1); 1011855#L1116 assume !(4 == initPersonOnFloor_~person#1); 1011545#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1010464#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1010465#L868 assume !(0 == callOnFloor_~floorID#1); 1012445#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1010614#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1012524#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1012523#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1012522#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1012521#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1012520#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1011680#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1011681#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1011225#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1011226#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1012519#L2413 assume !(0 != timeShift_~tmp___9~2#1); 1012364#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 1012365#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1010992#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1010993#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1011809#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 1010409#L1866 assume !(~currentFloorID~0 < 0); 1010410#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 1012261#$Ultimate##2076 assume ~currentFloorID~0 < 1; 1010978#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1010415#L805-2 assume !(0 == isFloorCalling_~floorID#1); 1010416#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1011231#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 1011232#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1010484#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1012518#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1012514#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1011293#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 1011294#L2236 assume !(0 != continueInDirection_~tmp~14#1); 1011423#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1011424#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1012127#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1013067#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1010733#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1010734#$Ultimate##2557 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1010800#L611 assume !(0 != ~floorButtons_spc2_1~0); 1085766#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1085764#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1085761#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1085759#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1085758#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1085756#L198-2 [2024-11-08 16:32:34,316 INFO L747 eck$LassoCheckResult]: Loop: 1085756#L198-2 assume !false; 1085755#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1085754#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1085753#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1085752#L206 assume 1 != cleanup_~tmp___0~0#1; 1085751#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1085750#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1085749#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 1085748#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 1085747#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1085746#L805-22 assume !(0 == isFloorCalling_~floorID#1); 1085741#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1085736#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1085719#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1078997#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1078996#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1078995#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1047184#L805-26 assume !(0 == isFloorCalling_~floorID#1); 1047179#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1047174#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1047172#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1047170#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1047165#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1047160#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1047157#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1047155#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1047153#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 1047152#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1047150#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1047149#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1047142#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1047139#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1047138#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1047137#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1047135#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1047134#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1047133#L1856-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1021788#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1021372#L1860-3 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1021366#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 1021360#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1021359#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1014393#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 1014387#L2236-15 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 1013504#L2242-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1013496#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1013490#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1013325#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1013316#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1013304#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1013299#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 1013261#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1013262#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1056046#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1056045#L198-2 assume !false; 1056044#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1056043#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1056042#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1056041#L206 assume 1 != cleanup_~tmp___0~0#1; 1056040#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1056039#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1056038#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 1056036#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 1056034#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1056033#L805-22 assume !(0 == isFloorCalling_~floorID#1); 1056028#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1056023#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1056006#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1013155#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1013156#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1013150#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1013147#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1013145#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1013142#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1013143#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1070146#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1013134#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1013131#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1013127#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 1013129#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1070183#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1070181#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 1070122#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1070262#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1070261#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1070260#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1070253#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1070100#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 1069989#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1069988#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 1039542#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1039541#L2232-5 assume !(1 == ~currentHeading~0); 1011925#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1011926#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1088667#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1088665#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1088664#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1088663#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1088662#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1088661#L611-1 assume !(0 != ~floorButtons_spc2_1~0); 1085768#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1085777#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1085762#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1085760#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1085757#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1085756#L198-2 [2024-11-08 16:32:34,317 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:34,317 INFO L85 PathProgramCache]: Analyzing trace with hash -506299987, now seen corresponding path program 1 times [2024-11-08 16:32:34,317 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:34,317 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [323854224] [2024-11-08 16:32:34,318 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:34,318 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:34,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-08 16:32:34,342 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-08 16:32:34,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-08 16:32:34,413 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-08 16:32:34,413 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:34,414 INFO L85 PathProgramCache]: Analyzing trace with hash 1487685232, now seen corresponding path program 1 times [2024-11-08 16:32:34,414 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:34,414 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [856661884] [2024-11-08 16:32:34,414 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:34,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:34,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:34,539 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-11-08 16:32:34,539 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:34,539 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [856661884] [2024-11-08 16:32:34,539 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [856661884] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:34,540 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:34,540 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 16:32:34,540 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [570202849] [2024-11-08 16:32:34,540 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:34,540 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:34,541 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:34,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-08 16:32:34,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-08 16:32:34,541 INFO L87 Difference]: Start difference. First operand 100137 states and 183019 transitions. cyclomatic complexity: 82884 Second operand has 7 states, 7 states have (on average 12.571428571428571) internal successors, (88), 7 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:36,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 16:32:36,782 INFO L93 Difference]: Finished difference Result 199307 states and 362803 transitions. [2024-11-08 16:32:36,782 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 199307 states and 362803 transitions. [2024-11-08 16:32:37,506 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 190602 [2024-11-08 16:32:38,947 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 199307 states to 199307 states and 362803 transitions. [2024-11-08 16:32:38,947 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 199307 [2024-11-08 16:32:39,105 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 199307 [2024-11-08 16:32:39,106 INFO L73 IsDeterministic]: Start isDeterministic. Operand 199307 states and 362803 transitions. [2024-11-08 16:32:39,244 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 16:32:39,244 INFO L218 hiAutomatonCegarLoop]: Abstraction has 199307 states and 362803 transitions. [2024-11-08 16:32:39,360 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 199307 states and 362803 transitions. [2024-11-08 16:32:41,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 199307 to 197901. [2024-11-08 16:32:41,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197901 states, 197901 states have (on average 1.8261504489618547) internal successors, (361397), 197900 states have internal predecessors, (361397), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 16:32:42,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197901 states to 197901 states and 361397 transitions. [2024-11-08 16:32:42,991 INFO L240 hiAutomatonCegarLoop]: Abstraction has 197901 states and 361397 transitions. [2024-11-08 16:32:42,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-08 16:32:42,994 INFO L425 stractBuchiCegarLoop]: Abstraction has 197901 states and 361397 transitions. [2024-11-08 16:32:42,995 INFO L332 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2024-11-08 16:32:42,995 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 197901 states and 361397 transitions. [2024-11-08 16:32:43,655 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 189244 [2024-11-08 16:32:43,655 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 16:32:43,655 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 16:32:43,697 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:43,697 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 16:32:43,698 INFO L745 eck$LassoCheckResult]: Stem: 1309956#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1309957#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1311118#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1310597#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1310598#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1310805#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1311715#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1309850#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1309851#L458 assume !(0 == getOrigin_~person#1); 1311526#L462 assume !(1 == getOrigin_~person#1); 1311669#L466 assume !(2 == getOrigin_~person#1); 1311234#L470 assume !(3 == getOrigin_~person#1); 1311235#L474 assume !(4 == getOrigin_~person#1); 1311470#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1309980#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1309981#L1076 assume !(0 == initPersonOnFloor_~floor#1); 1311258#L1103 assume 1 == initPersonOnFloor_~floor#1; 1311825#L1104 assume !(0 == initPersonOnFloor_~person#1); 1312102#L1107 assume !(1 == initPersonOnFloor_~person#1); 1311334#L1110 assume !(2 == initPersonOnFloor_~person#1); 1311335#L1113 assume !(3 == initPersonOnFloor_~person#1); 1311351#L1116 assume !(4 == initPersonOnFloor_~person#1); 1311023#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1309925#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1309926#L868 assume !(0 == callOnFloor_~floorID#1); 1312050#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1312131#L880-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1312164#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1312160#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1312161#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1312154#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1312155#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1311162#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1311163#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1310690#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1310692#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1312148#L2413 assume !(0 != timeShift_~tmp___9~2#1); 1312150#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 1311955#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1311956#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1311532#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1311533#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 1309869#L1866 assume !(~currentFloorID~0 < 0); 1309870#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 1311885#$Ultimate##2076 assume ~currentFloorID~0 < 1; 1311886#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1309875#L805-2 assume !(0 == isFloorCalling_~floorID#1); 1309876#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1310697#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 1310698#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1312146#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1312147#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1312138#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1312139#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 1311125#L2236 assume !(0 != continueInDirection_~tmp~14#1); 1311126#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1311656#L2248-1 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1311657#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1312720#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1312721#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1310258#$Ultimate##2557 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1310259#L611 assume !(0 != ~floorButtons_spc2_1~0); 1346420#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1346419#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1346418#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1346413#L655 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1312000#timeShift_returnLabel#1 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1312001#L198-2 [2024-11-08 16:32:43,698 INFO L747 eck$LassoCheckResult]: Loop: 1312001#L198-2 assume !false; 1412243#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1412241#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1412239#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1412237#L206 assume 1 != cleanup_~tmp___0~0#1; 1412235#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1412233#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1412231#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 1412227#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 1412229#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1413649#L805-22 assume !(0 == isFloorCalling_~floorID#1); 1413638#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1413633#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1411992#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1326704#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1411987#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1411984#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1371995#L805-26 assume !(0 == isFloorCalling_~floorID#1); 1371993#L809-26 assume !(1 == isFloorCalling_~floorID#1); 1371984#L813-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1371982#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1371980#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1371978#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1371973#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1371968#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1371965#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1371963#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1371961#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 1371960#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1371957#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1371956#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1371955#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1371952#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1371951#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1371949#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1371947#L2287-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1371948#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1372110#L1856-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1371944#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1371911#L1860-3 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1371910#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 1371908#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1371906#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1371904#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 1371901#L2236-15 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 1371897#L2242-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1371894#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1371892#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1371888#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1371887#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1371885#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1371883#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 1371833#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1371824#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1371822#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1371820#L198-2 assume !false; 1371818#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1371816#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1371814#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1371812#L206 assume 1 != cleanup_~tmp___0~0#1; 1371809#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1371806#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1371804#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 1371800#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 1371797#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1371796#L805-22 assume !(0 == isFloorCalling_~floorID#1); 1371795#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1371794#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1371782#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1371775#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1371768#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1371766#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1371763#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1371762#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1371761#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1371760#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1371759#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1371757#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1371756#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1371747#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 1371748#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1491299#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1312777#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 1312054#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1312055#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1475819#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1475816#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1475813#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1475769#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 1475654#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1474819#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 1475653#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1406492#L2232-5 assume !(1 == ~currentHeading~0); 1475650#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1475649#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1474798#L2248-11 havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1474795#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1474793#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1474792#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1474790#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1474788#L611-1 assume !(0 != ~floorButtons_spc2_1~0); 1412260#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1474781#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1412252#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1412248#L655-1 havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1412246#timeShift_returnLabel#2 havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1312001#L198-2 [2024-11-08 16:32:43,699 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:43,699 INFO L85 PathProgramCache]: Analyzing trace with hash -506299987, now seen corresponding path program 2 times [2024-11-08 16:32:43,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:43,699 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [476717851] [2024-11-08 16:32:43,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:43,699 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:43,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-08 16:32:43,740 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-08 16:32:43,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-08 16:32:43,814 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-08 16:32:43,815 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 16:32:43,815 INFO L85 PathProgramCache]: Analyzing trace with hash -1997271631, now seen corresponding path program 1 times [2024-11-08 16:32:43,816 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 16:32:43,816 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1351497748] [2024-11-08 16:32:43,816 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 16:32:43,816 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 16:32:43,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 16:32:43,925 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2024-11-08 16:32:43,925 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 16:32:43,926 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1351497748] [2024-11-08 16:32:43,926 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1351497748] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 16:32:43,926 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 16:32:43,926 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 16:32:43,926 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1392969793] [2024-11-08 16:32:43,928 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 16:32:43,928 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 16:32:43,929 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 16:32:43,929 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-08 16:32:43,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-08 16:32:43,929 INFO L87 Difference]: Start difference. First operand 197901 states and 361397 transitions. cyclomatic complexity: 163498 Second operand has 5 states, 5 states have (on average 18.0) internal successors, (90), 5 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)