./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version c7c6ca5d Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8190dbbeca15ebdc96e247bb91a06680a00a60089c25180495df59d4a11849af --- Real Ultimate output --- This is Ultimate 0.2.5-?-c7c6ca5-m [2024-11-09 15:54:57,795 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-09 15:54:57,850 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-09 15:54:57,854 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-09 15:54:57,855 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-09 15:54:57,881 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-09 15:54:57,882 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-09 15:54:57,882 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-09 15:54:57,883 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-09 15:54:57,886 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-09 15:54:57,887 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-09 15:54:57,887 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-09 15:54:57,887 INFO L153 SettingsManager]: * Use SBE=true [2024-11-09 15:54:57,888 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-09 15:54:57,888 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-09 15:54:57,888 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-09 15:54:57,888 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-09 15:54:57,888 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-09 15:54:57,888 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-09 15:54:57,889 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-09 15:54:57,889 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-09 15:54:57,891 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-09 15:54:57,891 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-09 15:54:57,891 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-09 15:54:57,891 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-09 15:54:57,892 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-09 15:54:57,892 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-09 15:54:57,892 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-09 15:54:57,892 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-09 15:54:57,892 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-09 15:54:57,893 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-09 15:54:57,893 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-09 15:54:57,894 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-09 15:54:57,894 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-09 15:54:57,894 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-09 15:54:57,894 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-09 15:54:57,894 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-09 15:54:57,895 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-09 15:54:57,895 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-09 15:54:57,895 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8190dbbeca15ebdc96e247bb91a06680a00a60089c25180495df59d4a11849af [2024-11-09 15:54:58,089 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-09 15:54:58,122 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-09 15:54:58,124 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-09 15:54:58,126 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-09 15:54:58,126 INFO L274 PluginConnector]: CDTParser initialized [2024-11-09 15:54:58,127 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c [2024-11-09 15:54:59,548 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-09 15:54:59,838 INFO L384 CDTParser]: Found 1 translation units. [2024-11-09 15:54:59,843 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c [2024-11-09 15:54:59,865 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/df42d882e/e439bfff38df4c2c9c5d4cba4c29940e/FLAGf90d4c726 [2024-11-09 15:54:59,880 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/df42d882e/e439bfff38df4c2c9c5d4cba4c29940e [2024-11-09 15:54:59,883 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-09 15:54:59,885 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-09 15:54:59,887 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-09 15:54:59,888 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-09 15:54:59,892 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-09 15:54:59,893 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 03:54:59" (1/1) ... [2024-11-09 15:54:59,893 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6d9b0397 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:54:59, skipping insertion in model container [2024-11-09 15:54:59,894 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 03:54:59" (1/1) ... [2024-11-09 15:54:59,960 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-09 15:55:00,368 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 15:55:00,386 INFO L200 MainTranslator]: Completed pre-run [2024-11-09 15:55:00,403 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [48] [2024-11-09 15:55:00,408 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [57] [2024-11-09 15:55:00,408 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [178] [2024-11-09 15:55:00,408 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [192] [2024-11-09 15:55:00,408 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [375] [2024-11-09 15:55:00,409 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [741] [2024-11-09 15:55:00,409 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1101] [2024-11-09 15:55:00,409 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [2529] [2024-11-09 15:55:00,409 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2620] [2024-11-09 15:55:00,409 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [2655] [2024-11-09 15:55:00,502 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 15:55:00,527 INFO L204 MainTranslator]: Completed translation [2024-11-09 15:55:00,527 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00 WrapperNode [2024-11-09 15:55:00,527 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-09 15:55:00,528 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-09 15:55:00,528 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-09 15:55:00,529 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-09 15:55:00,534 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,562 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,688 INFO L138 Inliner]: procedures = 88, calls = 329, calls flagged for inlining = 182, calls inlined = 233, statements flattened = 7563 [2024-11-09 15:55:00,688 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-09 15:55:00,689 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-09 15:55:00,689 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-09 15:55:00,689 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-09 15:55:00,698 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,698 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,712 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,766 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-09 15:55:00,767 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,767 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,813 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,849 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,861 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,873 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,890 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-09 15:55:00,891 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-09 15:55:00,891 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-09 15:55:00,891 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-09 15:55:00,892 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (1/1) ... [2024-11-09 15:55:00,896 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:55:00,905 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:55:00,918 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:55:00,920 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-09 15:55:00,960 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-09 15:55:00,960 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-09 15:55:00,960 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-09 15:55:00,960 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-09 15:55:00,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-09 15:55:00,962 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-09 15:55:00,962 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-09 15:55:00,962 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-09 15:55:00,962 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-09 15:55:00,962 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-09 15:55:01,115 INFO L238 CfgBuilder]: Building ICFG [2024-11-09 15:55:01,117 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-09 15:55:04,581 INFO L? ?]: Removed 3503 outVars from TransFormulas that were not future-live. [2024-11-09 15:55:04,582 INFO L287 CfgBuilder]: Performing block encoding [2024-11-09 15:55:04,661 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-09 15:55:04,661 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-11-09 15:55:04,662 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 03:55:04 BoogieIcfgContainer [2024-11-09 15:55:04,662 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-09 15:55:04,662 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-09 15:55:04,663 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-09 15:55:04,665 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-09 15:55:04,666 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-09 15:55:04,666 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 09.11 03:54:59" (1/3) ... [2024-11-09 15:55:04,666 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@68da0acd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 03:55:04, skipping insertion in model container [2024-11-09 15:55:04,667 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-09 15:55:04,667 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:55:00" (2/3) ... [2024-11-09 15:55:04,667 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@68da0acd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 03:55:04, skipping insertion in model container [2024-11-09 15:55:04,667 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-09 15:55:04,667 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 03:55:04" (3/3) ... [2024-11-09 15:55:04,668 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product01.cil.c [2024-11-09 15:55:04,732 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-09 15:55:04,732 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-09 15:55:04,732 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-09 15:55:04,732 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-09 15:55:04,736 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-09 15:55:04,736 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-09 15:55:04,736 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-09 15:55:04,736 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-09 15:55:04,751 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2284 states, 2283 states have (on average 1.8751642575558476) internal successors, (4281), 2283 states have internal predecessors, (4281), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:04,847 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1123 [2024-11-09 15:55:04,851 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:04,851 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:04,868 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:04,868 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:04,868 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-09 15:55:04,874 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2284 states, 2283 states have (on average 1.8751642575558476) internal successors, (4281), 2283 states have internal predecessors, (4281), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:04,896 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1123 [2024-11-09 15:55:04,897 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:04,897 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:04,900 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:04,901 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:04,909 INFO L745 eck$LassoCheckResult]: Stem: 170#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2180#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 865#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 507#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 667#valid_product_returnLabel#1true main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 508#L1088true assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 1480#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 104#__utac_acc__Specification2_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2030#L104true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 180#getOrigin_returnLabel#1true bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 994#L3009true assume 0 == initPersonOnFloor_~floor#1; 1513#L3010true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1217#L3117-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1981#L2801true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 605#L2813-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 942#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 385#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 658#L2738true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 88#isFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2276#L1925true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 235#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 780#L2073true assume !(0 != timeShift_~tmp___9~2#1); 364#L2164true assume !(1 == ~doorState~0); 1369#L2164-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 19#L1516true assume !(1 == stopRequestedInDirection_~dir#1); 1770#L1685true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1593#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 971#L2172true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 72#L1892true assume !(1 == ~currentHeading~0); 1610#L1902true assume !(0 == ~currentFloorID~0); 97#L1902-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 973#L1908-1true havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1186#L2181-2true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1009#getCurrentFloorID_returnLabel#1true __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 898#L254true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 2029#L255true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 698#areDoorsOpen_returnLabel#1true __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 1050#L259true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1097#L314true havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1912#timeShift_returnLabel#1true havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1140#L890-2true [2024-11-09 15:55:04,914 INFO L747 eck$LassoCheckResult]: Loop: 1140#L890-2true assume !false; 789#L891true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1740#L894true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 856#isBlocked_returnLabel#1true cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 665#L898true assume 1 != cleanup_~tmp___0~1#1; 968#L898-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 2007#L2738-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1382#isFloorCalling_returnLabel#22true anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 835#L1420true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 146#anyStopRequested_returnLabel#1true isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1054#isIdle_returnLabel#1true cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 2027#L910true assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 212#L2738-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1065#isFloorCalling_returnLabel#27true stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1456#L1925-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1990#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1670#L2073-2true assume !(0 != timeShift_~tmp___9~2#1); 561#L2164-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1907#L2164-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1222#L1516-2true assume !(1 == stopRequestedInDirection_~dir#1); 684#L1685-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1098#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1790#L2172-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1949#L1892-3true assume !(1 == ~currentHeading~0); 1516#L1902-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 654#L1902-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 885#L1908-7true havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 2009#L2181-5true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1298#getCurrentFloorID_returnLabel#2true __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 267#L254-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1597#L255-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1353#areDoorsOpen_returnLabel#6true __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 1678#L259-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 461#L314-1true havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1951#timeShift_returnLabel#2true havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1140#L890-2true [2024-11-09 15:55:04,922 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:04,922 INFO L85 PathProgramCache]: Analyzing trace with hash 846433161, now seen corresponding path program 1 times [2024-11-09 15:55:04,932 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:04,932 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1149991571] [2024-11-09 15:55:04,933 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:04,933 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:05,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:05,283 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:05,284 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:05,284 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1149991571] [2024-11-09 15:55:05,284 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1149991571] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:05,284 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:05,284 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:05,285 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1438837617] [2024-11-09 15:55:05,286 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:05,289 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:05,289 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:05,290 INFO L85 PathProgramCache]: Analyzing trace with hash 1611523527, now seen corresponding path program 1 times [2024-11-09 15:55:05,290 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:05,290 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2061818496] [2024-11-09 15:55:05,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:05,290 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:05,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:05,394 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:05,394 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:05,395 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2061818496] [2024-11-09 15:55:05,395 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2061818496] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:05,395 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:05,396 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 15:55:05,396 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [765184865] [2024-11-09 15:55:05,396 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:05,397 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:05,397 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:05,420 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-09 15:55:05,421 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-09 15:55:05,425 INFO L87 Difference]: Start difference. First operand has 2284 states, 2283 states have (on average 1.8751642575558476) internal successors, (4281), 2283 states have internal predecessors, (4281), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:05,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:05,608 INFO L93 Difference]: Finished difference Result 2278 states and 4267 transitions. [2024-11-09 15:55:05,609 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 2278 states and 4267 transitions. [2024-11-09 15:55:05,625 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1125 [2024-11-09 15:55:05,643 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 2278 states to 2260 states and 4247 transitions. [2024-11-09 15:55:05,644 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 2260 [2024-11-09 15:55:05,647 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 2260 [2024-11-09 15:55:05,648 INFO L73 IsDeterministic]: Start isDeterministic. Operand 2260 states and 4247 transitions. [2024-11-09 15:55:05,657 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:05,657 INFO L218 hiAutomatonCegarLoop]: Abstraction has 2260 states and 4247 transitions. [2024-11-09 15:55:05,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2260 states and 4247 transitions. [2024-11-09 15:55:05,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2260 to 2260. [2024-11-09 15:55:05,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2260 states, 2260 states have (on average 1.879203539823009) internal successors, (4247), 2259 states have internal predecessors, (4247), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:05,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2260 states to 2260 states and 4247 transitions. [2024-11-09 15:55:05,738 INFO L240 hiAutomatonCegarLoop]: Abstraction has 2260 states and 4247 transitions. [2024-11-09 15:55:05,739 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-09 15:55:05,742 INFO L425 stractBuchiCegarLoop]: Abstraction has 2260 states and 4247 transitions. [2024-11-09 15:55:05,742 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-09 15:55:05,742 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2260 states and 4247 transitions. [2024-11-09 15:55:05,752 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1125 [2024-11-09 15:55:05,752 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:05,752 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:05,755 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:05,755 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:05,756 INFO L745 eck$LassoCheckResult]: Stem: 4966#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4967#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 6044#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5552#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 5553#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 5554#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 5555#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 4819#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 4820#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 4990#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4991#L3009 assume 0 == initPersonOnFloor_~floor#1; 6172#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5060#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 6392#L2801 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5520#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 5712#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 5352#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 5353#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 4616#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 4787#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 6771#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 5785#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 5018#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 5020#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 6834#L2073 assume !(0 != timeShift_~tmp___9~2#1); 5318#L2164 assume !(1 == ~doorState~0); 5319#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 4620#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 4621#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 5006#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 6154#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 4753#L1892 assume !(1 == ~currentHeading~0); 4754#L1902 assume !(0 == ~currentFloorID~0); 4807#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4808#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 6130#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 6189#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 6071#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 6072#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 5844#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 5845#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 4796#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 6281#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6324#L890-2 [2024-11-09 15:55:05,756 INFO L747 eck$LassoCheckResult]: Loop: 6324#L890-2 assume !false; 5956#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 5957#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 6033#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 5801#L898 assume 1 != cleanup_~tmp___0~1#1; 5802#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 6151#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 5377#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 6010#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 4917#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 4918#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 6236#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 5051#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 4903#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 6250#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 5087#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 5088#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 5603#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 6171#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 6833#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 5642#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5643#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 6397#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 5826#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 4944#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 6282#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6724#L1892-3 assume !(1 == ~currentHeading~0); 6593#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5460#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5783#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5242#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 6460#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 5150#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 5151#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 6498#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 6499#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 5137#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 5480#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6324#L890-2 [2024-11-09 15:55:05,757 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:05,757 INFO L85 PathProgramCache]: Analyzing trace with hash -788278422, now seen corresponding path program 1 times [2024-11-09 15:55:05,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:05,757 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1933673268] [2024-11-09 15:55:05,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:05,758 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:05,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:05,879 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:05,880 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:05,880 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1933673268] [2024-11-09 15:55:05,880 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1933673268] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:05,880 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:05,880 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:05,880 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [191907264] [2024-11-09 15:55:05,881 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:05,881 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:05,881 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:05,881 INFO L85 PathProgramCache]: Analyzing trace with hash -468858600, now seen corresponding path program 1 times [2024-11-09 15:55:05,881 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:05,882 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1676278925] [2024-11-09 15:55:05,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:05,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:05,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:05,970 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:05,971 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:05,971 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1676278925] [2024-11-09 15:55:05,971 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1676278925] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:05,971 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:05,971 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:05,971 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [90247151] [2024-11-09 15:55:05,972 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:05,972 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:05,972 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:05,972 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-09 15:55:05,972 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-09 15:55:05,973 INFO L87 Difference]: Start difference. First operand 2260 states and 4247 transitions. cyclomatic complexity: 1988 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:07,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:07,462 INFO L93 Difference]: Finished difference Result 4562 states and 8491 transitions. [2024-11-09 15:55:07,462 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4562 states and 8491 transitions. [2024-11-09 15:55:07,504 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2305 [2024-11-09 15:55:07,537 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4562 states to 4562 states and 8491 transitions. [2024-11-09 15:55:07,537 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4562 [2024-11-09 15:55:07,541 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4562 [2024-11-09 15:55:07,541 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4562 states and 8491 transitions. [2024-11-09 15:55:07,544 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:07,544 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4562 states and 8491 transitions. [2024-11-09 15:55:07,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4562 states and 8491 transitions. [2024-11-09 15:55:07,723 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4562 to 4472. [2024-11-09 15:55:07,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4472 states, 4472 states have (on average 1.878577817531306) internal successors, (8401), 4471 states have internal predecessors, (8401), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:07,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4472 states to 4472 states and 8401 transitions. [2024-11-09 15:55:07,740 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4472 states and 8401 transitions. [2024-11-09 15:55:07,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-09 15:55:07,741 INFO L425 stractBuchiCegarLoop]: Abstraction has 4472 states and 8401 transitions. [2024-11-09 15:55:07,741 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-09 15:55:07,741 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4472 states and 8401 transitions. [2024-11-09 15:55:07,757 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2256 [2024-11-09 15:55:07,757 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:07,757 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:07,758 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:07,759 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:07,759 INFO L745 eck$LassoCheckResult]: Stem: 11806#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 11807#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 12941#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 12413#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 12414#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 12415#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 12416#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 11659#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 11660#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 11830#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 11831#L3009 assume 0 == initPersonOnFloor_~floor#1; 13088#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 11902#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 13332#L2801 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 13856#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 13953#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 13952#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 13950#L2738 assume !(0 == isFloorCalling_~floorID#1); 13951#L2742 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 13949#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 13948#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 13825#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 12661#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 11858#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 11860#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 11938#L2073 assume !(0 != timeShift_~tmp___9~2#1); 12167#L2164 assume !(1 == ~doorState~0); 12168#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 13469#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 14013#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 13998#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 13996#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 13994#L1892 assume !(1 == ~currentHeading~0); 13993#L1902 assume !(0 == ~currentFloorID~0); 13991#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 13979#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 13978#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 13977#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 13976#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 13975#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 13974#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 13154#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 11636#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 13822#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 13823#L890-2 [2024-11-09 15:55:07,760 INFO L747 eck$LassoCheckResult]: Loop: 13823#L890-2 assume !false; 12844#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 12845#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 12928#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 12929#L898 assume 1 != cleanup_~tmp___0~1#1; 13061#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 13062#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 13956#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 12904#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 12905#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 14618#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 14617#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 14616#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 14615#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 14611#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 14610#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 14071#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 14067#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 14066#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 14065#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 14064#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 14063#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 14062#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 14061#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 14056#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 14051#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 14049#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 14050#L1892-3 assume !(1 == ~currentHeading~0); 14029#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 14026#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 12960#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 12090#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 13410#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 11992#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 11993#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 13455#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 13456#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 11979#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 13847#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 13823#L890-2 [2024-11-09 15:55:07,760 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:07,760 INFO L85 PathProgramCache]: Analyzing trace with hash 260318243, now seen corresponding path program 1 times [2024-11-09 15:55:07,761 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:07,761 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [708674679] [2024-11-09 15:55:07,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:07,761 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:07,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:07,818 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:07,819 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:07,819 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [708674679] [2024-11-09 15:55:07,819 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [708674679] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:07,819 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:07,819 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:07,819 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [184094598] [2024-11-09 15:55:07,820 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:07,820 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:07,820 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:07,820 INFO L85 PathProgramCache]: Analyzing trace with hash 340613729, now seen corresponding path program 1 times [2024-11-09 15:55:07,820 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:07,821 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1949822009] [2024-11-09 15:55:07,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:07,821 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:07,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:07,884 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:07,885 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:07,885 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1949822009] [2024-11-09 15:55:07,885 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1949822009] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:07,885 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:07,885 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:07,885 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2008007510] [2024-11-09 15:55:07,886 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:07,886 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:07,886 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:07,886 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-09 15:55:07,886 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-09 15:55:07,887 INFO L87 Difference]: Start difference. First operand 4472 states and 8401 transitions. cyclomatic complexity: 3930 Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:09,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:09,544 INFO L93 Difference]: Finished difference Result 8000 states and 15010 transitions. [2024-11-09 15:55:09,544 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 8000 states and 15010 transitions. [2024-11-09 15:55:09,672 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4072 [2024-11-09 15:55:09,702 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 8000 states to 8000 states and 15010 transitions. [2024-11-09 15:55:09,702 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 8000 [2024-11-09 15:55:09,708 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 8000 [2024-11-09 15:55:09,708 INFO L73 IsDeterministic]: Start isDeterministic. Operand 8000 states and 15010 transitions. [2024-11-09 15:55:09,716 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:09,716 INFO L218 hiAutomatonCegarLoop]: Abstraction has 8000 states and 15010 transitions. [2024-11-09 15:55:09,721 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8000 states and 15010 transitions. [2024-11-09 15:55:09,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8000 to 7982. [2024-11-09 15:55:09,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7982 states, 7982 states have (on average 1.8767226259082936) internal successors, (14980), 7981 states have internal predecessors, (14980), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:09,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7982 states to 7982 states and 14980 transitions. [2024-11-09 15:55:09,820 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7982 states and 14980 transitions. [2024-11-09 15:55:09,823 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-09 15:55:09,824 INFO L425 stractBuchiCegarLoop]: Abstraction has 7982 states and 14980 transitions. [2024-11-09 15:55:09,824 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-09 15:55:09,824 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7982 states and 14980 transitions. [2024-11-09 15:55:09,841 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4063 [2024-11-09 15:55:09,841 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:09,841 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:09,843 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:09,843 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:09,844 INFO L745 eck$LassoCheckResult]: Stem: 24298#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 24299#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 25415#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 24903#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 24904#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 24905#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 24906#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 24151#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 24152#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 24322#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 24323#L3009 assume 0 == initPersonOnFloor_~floor#1; 25553#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 24393#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 25787#L2801 assume !(0 == callOnFloor_~floorID#1); 26123#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 24871#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 25067#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 24696#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 24697#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 24118#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 24119#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 30176#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 30177#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 30865#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 30866#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 31788#L2073 assume !(0 != timeShift_~tmp___9~2#1); 31787#L2164 assume !(1 == ~doorState~0); 31786#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 31785#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 31767#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 31754#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 31752#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 31753#L1892 assume !(1 == ~currentHeading~0); 31886#L1902 assume !(0 == ~currentFloorID~0); 24139#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 24140#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 26492#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 26491#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 26488#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 26486#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 26487#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 26470#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 26460#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 26458#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 26457#L890-2 [2024-11-09 15:55:09,844 INFO L747 eck$LassoCheckResult]: Loop: 26457#L890-2 assume !false; 26456#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 26455#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 26454#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 26453#L898 assume 1 != cleanup_~tmp___0~1#1; 26452#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 26447#L2738-21 assume !(0 == isFloorCalling_~floorID#1); 26437#L2742-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 26424#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 26413#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 26408#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 26407#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 26406#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 26405#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 26404#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 26403#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 26401#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 26397#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 26395#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 26394#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 26388#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 26382#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 26381#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 26360#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 26348#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 26335#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 26334#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 26249#L1892-3 assume !(1 == ~currentHeading~0); 26250#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 24807#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25139#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 26510#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 26508#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 26505#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 26503#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 26504#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 26481#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 26461#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 26459#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 26457#L890-2 [2024-11-09 15:55:09,845 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:09,845 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 1 times [2024-11-09 15:55:09,845 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:09,846 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [782591171] [2024-11-09 15:55:09,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:09,846 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:09,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:09,908 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:09,909 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:09,909 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [782591171] [2024-11-09 15:55:09,909 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [782591171] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:09,909 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:09,909 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:09,909 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [342852618] [2024-11-09 15:55:09,909 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:09,909 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:09,910 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:09,910 INFO L85 PathProgramCache]: Analyzing trace with hash 490707539, now seen corresponding path program 1 times [2024-11-09 15:55:09,910 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:09,910 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [251330471] [2024-11-09 15:55:09,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:09,911 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:09,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:09,950 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:09,951 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:09,951 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [251330471] [2024-11-09 15:55:09,951 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [251330471] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:09,951 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:09,951 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:09,954 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1227717488] [2024-11-09 15:55:09,954 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:09,954 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:09,955 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:09,955 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:55:09,955 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:55:09,955 INFO L87 Difference]: Start difference. First operand 7982 states and 14980 transitions. cyclomatic complexity: 6999 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:10,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:10,399 INFO L93 Difference]: Finished difference Result 7828 states and 14664 transitions. [2024-11-09 15:55:10,399 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 7828 states and 14664 transitions. [2024-11-09 15:55:10,442 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3941 [2024-11-09 15:55:10,501 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 7828 states to 7828 states and 14664 transitions. [2024-11-09 15:55:10,504 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 7828 [2024-11-09 15:55:10,516 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 7828 [2024-11-09 15:55:10,517 INFO L73 IsDeterministic]: Start isDeterministic. Operand 7828 states and 14664 transitions. [2024-11-09 15:55:10,531 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:10,531 INFO L218 hiAutomatonCegarLoop]: Abstraction has 7828 states and 14664 transitions. [2024-11-09 15:55:10,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7828 states and 14664 transitions. [2024-11-09 15:55:10,668 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7828 to 7828. [2024-11-09 15:55:10,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7828 states, 7828 states have (on average 1.8732754215636178) internal successors, (14664), 7827 states have internal predecessors, (14664), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:10,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7828 states to 7828 states and 14664 transitions. [2024-11-09 15:55:10,718 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7828 states and 14664 transitions. [2024-11-09 15:55:10,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:55:10,720 INFO L425 stractBuchiCegarLoop]: Abstraction has 7828 states and 14664 transitions. [2024-11-09 15:55:10,720 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-09 15:55:10,720 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7828 states and 14664 transitions. [2024-11-09 15:55:10,757 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3941 [2024-11-09 15:55:10,762 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:10,830 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:10,832 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:10,832 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:10,832 INFO L745 eck$LassoCheckResult]: Stem: 40105#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 40106#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 41194#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 40688#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 40689#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 40690#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 40691#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 39960#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 39961#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 40130#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 40131#L3009 assume 0 == initPersonOnFloor_~floor#1; 41326#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 40198#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 41558#L2801 assume !(0 == callOnFloor_~floorID#1); 41877#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 40659#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 42202#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 42201#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 42199#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 42198#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 42197#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 42195#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 42191#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 42189#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 42188#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 42186#L2073 assume !(0 != timeShift_~tmp___9~2#1); 42185#L2164 assume !(1 == ~doorState~0); 42173#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 42153#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 42139#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 42126#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 42124#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 42125#L1892 assume !(1 == ~currentHeading~0); 42500#L1902 assume !(0 == ~currentFloorID~0); 42498#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 42411#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 42409#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 42408#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 42407#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 42406#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 42405#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 42361#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 42349#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 42346#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 42344#L890-2 [2024-11-09 15:55:10,834 INFO L747 eck$LassoCheckResult]: Loop: 42344#L890-2 assume !false; 42342#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 42340#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 42338#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 42336#L898 assume 1 != cleanup_~tmp___0~1#1; 42334#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 42333#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 42332#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 42208#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 42210#L1424 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 42301#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 42300#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 42299#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 42297#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 42296#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 42295#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 42293#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 42289#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 42287#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 42286#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 42284#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 42282#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 42266#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 42243#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 42229#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 42216#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 42215#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 42213#L1892-3 assume !(1 == ~currentHeading~0); 42211#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 42212#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 42624#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 42622#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 42621#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 42430#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 42428#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 42429#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 42372#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 42350#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 42347#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 42344#L890-2 [2024-11-09 15:55:10,835 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:10,835 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 2 times [2024-11-09 15:55:10,835 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:10,835 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [953478894] [2024-11-09 15:55:10,835 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:10,835 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:10,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:10,886 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:10,886 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:10,886 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [953478894] [2024-11-09 15:55:10,886 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [953478894] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:10,886 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:10,886 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:10,887 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [408875321] [2024-11-09 15:55:10,887 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:10,887 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:10,887 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:10,887 INFO L85 PathProgramCache]: Analyzing trace with hash -1458560194, now seen corresponding path program 1 times [2024-11-09 15:55:10,887 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:10,887 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1025762732] [2024-11-09 15:55:10,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:10,888 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:10,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:10,940 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:10,941 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:10,941 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1025762732] [2024-11-09 15:55:10,941 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1025762732] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:10,941 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:10,941 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 15:55:10,941 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [26777906] [2024-11-09 15:55:10,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:10,942 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:10,945 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:10,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 15:55:10,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 15:55:10,946 INFO L87 Difference]: Start difference. First operand 7828 states and 14664 transitions. cyclomatic complexity: 6837 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:11,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:11,116 INFO L93 Difference]: Finished difference Result 14335 states and 26840 transitions. [2024-11-09 15:55:11,116 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14335 states and 26840 transitions. [2024-11-09 15:55:11,156 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7820 [2024-11-09 15:55:11,193 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14335 states to 14335 states and 26840 transitions. [2024-11-09 15:55:11,193 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14335 [2024-11-09 15:55:11,204 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14335 [2024-11-09 15:55:11,205 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14335 states and 26840 transitions. [2024-11-09 15:55:11,221 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:11,222 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14335 states and 26840 transitions. [2024-11-09 15:55:11,234 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14335 states and 26840 transitions. [2024-11-09 15:55:11,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14335 to 14335. [2024-11-09 15:55:11,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14335 states, 14335 states have (on average 1.872340425531915) internal successors, (26840), 14334 states have internal predecessors, (26840), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:11,370 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14335 states to 14335 states and 26840 transitions. [2024-11-09 15:55:11,371 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14335 states and 26840 transitions. [2024-11-09 15:55:11,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 15:55:11,372 INFO L425 stractBuchiCegarLoop]: Abstraction has 14335 states and 26840 transitions. [2024-11-09 15:55:11,372 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-09 15:55:11,373 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14335 states and 26840 transitions. [2024-11-09 15:55:11,396 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7820 [2024-11-09 15:55:11,397 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:11,397 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:11,399 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:11,399 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:11,399 INFO L745 eck$LassoCheckResult]: Stem: 62281#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 62282#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 63362#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 62863#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 62864#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 62865#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 62866#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 62135#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 62136#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 62301#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 62302#L3009 assume 0 == initPersonOnFloor_~floor#1; 63491#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 62372#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 63719#L2801 assume !(0 == callOnFloor_~floorID#1); 64037#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 62833#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 63025#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 62666#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 62667#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 64657#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 64656#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 64654#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 64649#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 64643#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 64459#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 64453#L2073 assume !(0 != timeShift_~tmp___9~2#1); 64451#L2164 assume !(1 == ~doorState~0); 64450#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 64448#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 64343#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 64327#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 64319#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 64312#L1892 assume !(1 == ~currentHeading~0); 64303#L1902 assume !(0 == ~currentFloorID~0); 64297#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 64293#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 64290#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 64288#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 64281#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 64279#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 64280#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 64236#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 64228#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 64220#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 64221#L890-2 [2024-11-09 15:55:11,402 INFO L747 eck$LassoCheckResult]: Loop: 64221#L890-2 assume !false; 64216#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 64217#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 64212#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 64213#L898 assume 1 != cleanup_~tmp___0~1#1; 64208#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 64209#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 64204#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 64205#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 64198#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 64200#L2738-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 65051#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 65044#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 65036#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 65034#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 65032#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 65031#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 65030#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 65029#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 65027#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 65023#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 65021#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 65020#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 65014#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 65012#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 65011#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 65009#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 64745#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 64729#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 64721#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 64714#L1892-3 assume !(1 == ~currentHeading~0); 64705#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 64699#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 64695#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 64693#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 64291#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 64289#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 64284#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 64285#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 64248#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 64240#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 64222#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 64221#L890-2 [2024-11-09 15:55:11,402 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:11,402 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 3 times [2024-11-09 15:55:11,403 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:11,403 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [944033603] [2024-11-09 15:55:11,403 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:11,403 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:11,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:11,452 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:11,453 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:11,453 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [944033603] [2024-11-09 15:55:11,453 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [944033603] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:11,453 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:11,454 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:11,454 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1395969998] [2024-11-09 15:55:11,454 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:11,454 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:11,455 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:11,455 INFO L85 PathProgramCache]: Analyzing trace with hash 563705072, now seen corresponding path program 1 times [2024-11-09 15:55:11,455 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:11,455 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [648256533] [2024-11-09 15:55:11,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:11,455 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:11,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:11,574 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:11,575 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:11,575 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [648256533] [2024-11-09 15:55:11,575 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [648256533] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:11,575 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:11,575 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:11,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1555058649] [2024-11-09 15:55:11,575 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:11,576 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:11,576 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:11,576 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:55:11,576 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:55:11,576 INFO L87 Difference]: Start difference. First operand 14335 states and 26840 transitions. cyclomatic complexity: 12506 Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:12,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:12,022 INFO L93 Difference]: Finished difference Result 14335 states and 26696 transitions. [2024-11-09 15:55:12,022 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14335 states and 26696 transitions. [2024-11-09 15:55:12,065 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7820 [2024-11-09 15:55:12,104 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14335 states to 14335 states and 26696 transitions. [2024-11-09 15:55:12,104 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14335 [2024-11-09 15:55:12,122 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14335 [2024-11-09 15:55:12,122 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14335 states and 26696 transitions. [2024-11-09 15:55:12,135 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:12,135 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14335 states and 26696 transitions. [2024-11-09 15:55:12,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14335 states and 26696 transitions. [2024-11-09 15:55:12,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14335 to 14335. [2024-11-09 15:55:12,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14335 states, 14335 states have (on average 1.862295081967213) internal successors, (26696), 14334 states have internal predecessors, (26696), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:12,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14335 states to 14335 states and 26696 transitions. [2024-11-09 15:55:12,284 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14335 states and 26696 transitions. [2024-11-09 15:55:12,285 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:55:12,286 INFO L425 stractBuchiCegarLoop]: Abstraction has 14335 states and 26696 transitions. [2024-11-09 15:55:12,286 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-09 15:55:12,286 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14335 states and 26696 transitions. [2024-11-09 15:55:12,316 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7820 [2024-11-09 15:55:12,317 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:12,317 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:12,320 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:12,320 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:12,321 INFO L745 eck$LassoCheckResult]: Stem: 90955#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 90956#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 92065#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 91542#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 91543#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 91544#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 91545#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 90811#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 90812#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 90976#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 90977#L3009 assume 0 == initPersonOnFloor_~floor#1; 92202#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 91048#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 92445#L2801 assume !(0 == callOnFloor_~floorID#1); 92792#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 91510#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 93272#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 93271#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 93269#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 93268#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 93267#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 93265#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 93261#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 93260#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 93259#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 93258#L2073 assume !(0 != timeShift_~tmp___9~2#1); 93257#L2164 assume !(1 == ~doorState~0); 93256#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 93250#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 93136#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 93120#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 93112#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 93105#L1892 assume !(1 == ~currentHeading~0); 93096#L1902 assume !(0 == ~currentFloorID~0); 93090#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 93086#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 93083#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 93080#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 93081#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 94745#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 93057#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 93058#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 93023#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 93024#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 94698#L890-2 [2024-11-09 15:55:12,321 INFO L747 eck$LassoCheckResult]: Loop: 94698#L890-2 assume !false; 94697#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 94696#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 94695#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 94694#L898 assume 1 != cleanup_~tmp___0~1#1; 94693#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 94692#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 94691#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 94689#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 94687#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 94686#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 94682#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 94681#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 91869#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 91305#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 94673#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 94621#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 94622#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 94663#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 94662#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 94660#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 94656#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 94654#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 94650#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 94646#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 94637#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 94636#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 94634#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 94559#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 94546#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 94543#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 94544#L1892-3 assume !(1 == ~currentHeading~0); 94251#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 94245#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 93476#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 93475#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 94715#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 94714#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 94713#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 93069#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 93070#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 94700#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 94699#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 94698#L890-2 [2024-11-09 15:55:12,322 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:12,322 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 4 times [2024-11-09 15:55:12,322 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:12,322 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1368196575] [2024-11-09 15:55:12,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:12,322 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:12,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:12,372 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:12,372 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:12,372 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1368196575] [2024-11-09 15:55:12,372 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1368196575] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:12,372 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:12,372 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:12,372 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [244060082] [2024-11-09 15:55:12,372 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:12,373 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:12,373 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:12,373 INFO L85 PathProgramCache]: Analyzing trace with hash -1440860298, now seen corresponding path program 1 times [2024-11-09 15:55:12,373 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:12,373 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1966217223] [2024-11-09 15:55:12,373 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:12,373 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:12,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:12,407 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:12,407 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:12,408 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1966217223] [2024-11-09 15:55:12,408 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1966217223] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:12,408 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:12,408 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:55:12,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1092471535] [2024-11-09 15:55:12,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:12,408 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:12,408 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:12,408 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 15:55:12,408 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 15:55:12,409 INFO L87 Difference]: Start difference. First operand 14335 states and 26696 transitions. cyclomatic complexity: 12362 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:12,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:12,624 INFO L93 Difference]: Finished difference Result 14364 states and 26725 transitions. [2024-11-09 15:55:12,624 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14364 states and 26725 transitions. [2024-11-09 15:55:12,678 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7838 [2024-11-09 15:55:12,716 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14364 states to 14364 states and 26725 transitions. [2024-11-09 15:55:12,716 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14364 [2024-11-09 15:55:12,729 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14364 [2024-11-09 15:55:12,729 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14364 states and 26725 transitions. [2024-11-09 15:55:12,749 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:12,749 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14364 states and 26725 transitions. [2024-11-09 15:55:12,756 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14364 states and 26725 transitions. [2024-11-09 15:55:12,894 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14364 to 14353. [2024-11-09 15:55:12,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14353 states, 14353 states have (on average 1.8612136835504773) internal successors, (26714), 14352 states have internal predecessors, (26714), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:12,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14353 states to 14353 states and 26714 transitions. [2024-11-09 15:55:12,938 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14353 states and 26714 transitions. [2024-11-09 15:55:12,938 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 15:55:12,939 INFO L425 stractBuchiCegarLoop]: Abstraction has 14353 states and 26714 transitions. [2024-11-09 15:55:12,940 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-09 15:55:12,940 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14353 states and 26714 transitions. [2024-11-09 15:55:12,983 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7832 [2024-11-09 15:55:12,983 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:12,983 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:12,987 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:12,987 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:12,987 INFO L745 eck$LassoCheckResult]: Stem: 119663#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 119664#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 120758#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 120249#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 120250#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 120251#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 120252#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 119518#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 119519#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 119683#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 119684#L3009 assume 0 == initPersonOnFloor_~floor#1; 120891#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 119754#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 121133#L2801 assume !(0 == callOnFloor_~floorID#1); 121469#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 120217#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 121957#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 121956#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 121954#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 121955#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 121958#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 121948#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 121943#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 121941#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 121939#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 121934#L2073 assume !(0 != timeShift_~tmp___9~2#1); 121932#L2164 assume !(1 == ~doorState~0); 121929#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 121926#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 121927#L1685 assume !(0 == ~currentFloorID~0); 121199#L1691 assume !(~currentFloorID~0 > 0); 121201#$Ultimate##2092 assume ~currentFloorID~0 > 0; 120128#L1708 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 120130#L1709 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 121155#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 132399#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 132396#L1892 assume !(1 == ~currentHeading~0); 132394#L1902 assume !(0 == ~currentFloorID~0); 132390#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 132381#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 132377#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 132376#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 132374#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 132372#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 132371#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 132368#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 132359#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 132348#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 132345#L890-2 [2024-11-09 15:55:12,988 INFO L747 eck$LassoCheckResult]: Loop: 132345#L890-2 assume !false; 132343#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 132341#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 132339#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 132337#L898 assume 1 != cleanup_~tmp___0~1#1; 132335#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 132333#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 132331#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 132327#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 121163#L1424 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 121164#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 132824#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 132822#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 132817#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 132818#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 133465#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 133467#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 133475#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 133470#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 133469#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 133463#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 133464#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 120344#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 120345#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 121138#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 121139#L1685-2 assume !(0 == ~currentFloorID~0); 120531#L1691-2 assume !(~currentFloorID~0 > 0); 120084#$Ultimate##4542 assume ~currentFloorID~0 > 0; 120086#L1708-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 121394#L1709-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 119640#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 133575#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 133574#L1892-3 assume !(1 == ~currentHeading~0); 121356#L1902-9 assume !(0 == ~currentFloorID~0); 120156#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 120486#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 119939#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 121208#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 119845#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 119846#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 121249#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 121250#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 119832#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 120176#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 132345#L890-2 [2024-11-09 15:55:12,988 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:12,988 INFO L85 PathProgramCache]: Analyzing trace with hash -392297214, now seen corresponding path program 1 times [2024-11-09 15:55:12,988 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:12,988 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [600324652] [2024-11-09 15:55:12,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:12,988 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:13,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:13,043 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:13,043 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:13,046 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [600324652] [2024-11-09 15:55:13,046 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [600324652] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:13,046 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:13,046 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:13,046 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1205828844] [2024-11-09 15:55:13,047 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:13,047 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:13,047 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:13,047 INFO L85 PathProgramCache]: Analyzing trace with hash 367395542, now seen corresponding path program 1 times [2024-11-09 15:55:13,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:13,048 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [833282942] [2024-11-09 15:55:13,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:13,048 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:13,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:13,089 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:13,089 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:13,089 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [833282942] [2024-11-09 15:55:13,090 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [833282942] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:13,090 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:13,090 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 15:55:13,091 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1256060805] [2024-11-09 15:55:13,091 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:13,091 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:13,091 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:13,091 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 15:55:13,091 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 15:55:13,092 INFO L87 Difference]: Start difference. First operand 14353 states and 26714 transitions. cyclomatic complexity: 12362 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:13,859 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:13,860 INFO L93 Difference]: Finished difference Result 10860 states and 20093 transitions. [2024-11-09 15:55:13,860 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10860 states and 20093 transitions. [2024-11-09 15:55:13,903 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7885 [2024-11-09 15:55:13,931 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10860 states to 10860 states and 20093 transitions. [2024-11-09 15:55:13,932 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10860 [2024-11-09 15:55:13,940 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10860 [2024-11-09 15:55:13,940 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10860 states and 20093 transitions. [2024-11-09 15:55:13,953 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:13,953 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10860 states and 20093 transitions. [2024-11-09 15:55:13,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10860 states and 20093 transitions. [2024-11-09 15:55:14,058 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10860 to 10851. [2024-11-09 15:55:14,070 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10851 states, 10851 states have (on average 1.8503363745276933) internal successors, (20078), 10850 states have internal predecessors, (20078), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:14,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10851 states to 10851 states and 20078 transitions. [2024-11-09 15:55:14,089 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10851 states and 20078 transitions. [2024-11-09 15:55:14,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-09 15:55:14,093 INFO L425 stractBuchiCegarLoop]: Abstraction has 10851 states and 20078 transitions. [2024-11-09 15:55:14,093 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-09 15:55:14,093 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10851 states and 20078 transitions. [2024-11-09 15:55:14,123 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7876 [2024-11-09 15:55:14,123 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:14,123 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:14,125 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:14,126 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:14,126 INFO L745 eck$LassoCheckResult]: Stem: 144867#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 144868#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 145870#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 145398#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 145399#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 145400#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 145401#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 144730#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 144731#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 144887#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 144888#L3009 assume 0 == initPersonOnFloor_~floor#1; 145997#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 144942#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 146230#L2801 assume !(0 == callOnFloor_~floorID#1); 146538#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 145371#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 146700#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 146699#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 146698#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 146697#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 146696#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 146626#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 145973#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 144911#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 144913#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 146695#L2073 assume !(0 != timeShift_~tmp___9~2#1); 145184#L2164 assume !(1 == ~doorState~0); 145185#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 144549#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 144550#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 145219#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 145980#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 145901#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 145902#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 145416#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 145417#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 144630#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 144529#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 144530#L1892-2 assume !(1 == ~currentHeading~0); 145788#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 145789#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 146158#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 145954#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 149085#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 149084#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 149083#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 149082#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 149079#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 149070#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 149007#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 149006#L890-2 [2024-11-09 15:55:14,128 INFO L747 eck$LassoCheckResult]: Loop: 149006#L890-2 assume !false; 149005#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 149004#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 149002#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 148999#L898 assume 1 != cleanup_~tmp___0~1#1; 148997#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 148994#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 148993#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 148991#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 148989#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 148988#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 148968#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 148966#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 148947#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 148928#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 148926#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 148924#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 148921#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 148920#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 148919#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 148918#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 148917#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 148915#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 148914#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 148912#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 148911#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 148910#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 148908#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 145659#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 145660#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 148682#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 148681#L1947-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 148680#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 148678#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 148595#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 148589#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 148585#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 148586#L1892-5 assume !(1 == ~currentHeading~0); 152117#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 148568#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 148565#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 148562#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 149039#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 149034#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 149032#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 149031#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 149022#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 149009#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 149008#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 149006#L890-2 [2024-11-09 15:55:14,129 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:14,129 INFO L85 PathProgramCache]: Analyzing trace with hash 1761456702, now seen corresponding path program 1 times [2024-11-09 15:55:14,129 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:14,129 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [85592418] [2024-11-09 15:55:14,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:14,129 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:14,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:14,181 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:14,181 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:14,182 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [85592418] [2024-11-09 15:55:14,182 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [85592418] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:14,182 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:14,182 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:14,182 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1586797288] [2024-11-09 15:55:14,182 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:14,182 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:14,182 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:14,183 INFO L85 PathProgramCache]: Analyzing trace with hash 279913123, now seen corresponding path program 1 times [2024-11-09 15:55:14,183 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:14,183 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1978723551] [2024-11-09 15:55:14,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:14,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:14,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:14,232 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:14,233 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:14,233 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1978723551] [2024-11-09 15:55:14,233 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1978723551] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:14,233 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:14,233 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:55:14,233 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1716853917] [2024-11-09 15:55:14,233 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:14,233 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:14,234 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:14,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 15:55:14,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 15:55:14,234 INFO L87 Difference]: Start difference. First operand 10851 states and 20078 transitions. cyclomatic complexity: 9228 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:14,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:14,320 INFO L93 Difference]: Finished difference Result 10869 states and 20096 transitions. [2024-11-09 15:55:14,320 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10869 states and 20096 transitions. [2024-11-09 15:55:14,361 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7891 [2024-11-09 15:55:14,389 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10869 states to 10869 states and 20096 transitions. [2024-11-09 15:55:14,389 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10869 [2024-11-09 15:55:14,396 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10869 [2024-11-09 15:55:14,397 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10869 states and 20096 transitions. [2024-11-09 15:55:14,408 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:14,408 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10869 states and 20096 transitions. [2024-11-09 15:55:14,414 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10869 states and 20096 transitions. [2024-11-09 15:55:14,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10869 to 10863. [2024-11-09 15:55:14,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10863 states, 10863 states have (on average 1.849397035809629) internal successors, (20090), 10862 states have internal predecessors, (20090), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:14,523 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10863 states to 10863 states and 20090 transitions. [2024-11-09 15:55:14,524 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10863 states and 20090 transitions. [2024-11-09 15:55:14,524 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 15:55:14,525 INFO L425 stractBuchiCegarLoop]: Abstraction has 10863 states and 20090 transitions. [2024-11-09 15:55:14,525 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-09 15:55:14,525 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10863 states and 20090 transitions. [2024-11-09 15:55:14,547 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7886 [2024-11-09 15:55:14,547 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:14,548 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:14,549 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:14,549 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:14,549 INFO L745 eck$LassoCheckResult]: Stem: 166598#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 166599#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 167602#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 167129#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 167130#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 167131#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 167132#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 166459#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 166460#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 166622#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 166623#L3009 assume 0 == initPersonOnFloor_~floor#1; 167728#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 166673#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 167962#L2801 assume !(0 == callOnFloor_~floorID#1); 168279#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 167099#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 168462#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 168461#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 168460#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 168459#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 168458#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 168376#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 167706#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 166642#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 166644#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 168457#L2073 assume !(0 != timeShift_~tmp___9~2#1); 166912#L2164 assume !(1 == ~doorState~0); 166913#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 166277#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 166278#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 166949#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 167712#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 167632#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 167634#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 167985#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 167507#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 166357#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 166257#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 166258#L1892-2 assume !(1 == ~currentHeading~0); 167519#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 167520#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 167888#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 167687#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 168513#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 168514#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 168508#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 168509#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 168488#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 168478#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 168479#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 171611#L890-2 [2024-11-09 15:55:14,549 INFO L747 eck$LassoCheckResult]: Loop: 171611#L890-2 assume !false; 171606#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 168472#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 168471#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 168469#L898 assume 1 != cleanup_~tmp___0~1#1; 168470#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 171557#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 171553#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 171547#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 171548#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 173681#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 176888#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 176887#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 176842#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 176833#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 176831#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 176829#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 176828#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 172589#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 172588#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 172587#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 172586#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 172584#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 172583#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 172581#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 167218#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 167219#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 167968#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 167388#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 167389#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 167843#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 167797#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 167799#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 177005#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 168455#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 167207#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 166515#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 166516#L1892-5 assume !(1 == ~currentHeading~0); 168226#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 166360#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 170379#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 170376#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 176782#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 176781#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 176779#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 176777#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 176774#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 176765#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 176764#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 171611#L890-2 [2024-11-09 15:55:14,550 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:14,550 INFO L85 PathProgramCache]: Analyzing trace with hash 1761456702, now seen corresponding path program 2 times [2024-11-09 15:55:14,550 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:14,550 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1979572700] [2024-11-09 15:55:14,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:14,550 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:14,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:14,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:14,592 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:14,593 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1979572700] [2024-11-09 15:55:14,593 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1979572700] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:14,593 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:14,593 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:14,593 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [993463301] [2024-11-09 15:55:14,594 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:14,594 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:14,595 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:14,595 INFO L85 PathProgramCache]: Analyzing trace with hash -1714231583, now seen corresponding path program 1 times [2024-11-09 15:55:14,595 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:14,595 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326857733] [2024-11-09 15:55:14,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:14,595 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:14,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:14,703 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:14,704 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:14,704 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326857733] [2024-11-09 15:55:14,704 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326857733] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:14,704 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:14,704 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 15:55:14,704 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1405157184] [2024-11-09 15:55:14,705 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:14,705 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:14,705 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:14,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 15:55:14,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 15:55:14,705 INFO L87 Difference]: Start difference. First operand 10863 states and 20090 transitions. cyclomatic complexity: 9228 Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:14,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:14,821 INFO L93 Difference]: Finished difference Result 12484 states and 22812 transitions. [2024-11-09 15:55:14,821 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 12484 states and 22812 transitions. [2024-11-09 15:55:14,849 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9344 [2024-11-09 15:55:14,870 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 12484 states to 12484 states and 22812 transitions. [2024-11-09 15:55:14,870 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 12484 [2024-11-09 15:55:14,876 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 12484 [2024-11-09 15:55:14,876 INFO L73 IsDeterministic]: Start isDeterministic. Operand 12484 states and 22812 transitions. [2024-11-09 15:55:14,882 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:14,883 INFO L218 hiAutomatonCegarLoop]: Abstraction has 12484 states and 22812 transitions. [2024-11-09 15:55:14,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12484 states and 22812 transitions. [2024-11-09 15:55:14,963 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12484 to 12459. [2024-11-09 15:55:14,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12459 states, 12459 states have (on average 1.828878722208845) internal successors, (22786), 12458 states have internal predecessors, (22786), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:14,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12459 states to 12459 states and 22786 transitions. [2024-11-09 15:55:14,988 INFO L240 hiAutomatonCegarLoop]: Abstraction has 12459 states and 22786 transitions. [2024-11-09 15:55:14,988 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 15:55:14,988 INFO L425 stractBuchiCegarLoop]: Abstraction has 12459 states and 22786 transitions. [2024-11-09 15:55:14,988 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-09 15:55:14,988 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12459 states and 22786 transitions. [2024-11-09 15:55:15,015 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9319 [2024-11-09 15:55:15,016 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:15,016 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:15,017 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:15,017 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:15,017 INFO L745 eck$LassoCheckResult]: Stem: 189958#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 189959#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 190992#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 190503#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 190504#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 190501#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 190502#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 189819#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 189820#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 189978#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 189979#L3009 assume 0 == initPersonOnFloor_~floor#1; 191125#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 190033#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 191362#L2801 assume !(0 == callOnFloor_~floorID#1); 191702#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 190473#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 191935#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 191934#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 191933#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 191932#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 191931#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 191811#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 191099#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 190002#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 190004#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 191929#L2073 assume !(0 != timeShift_~tmp___9~2#1); 190280#L2164 assume !(1 == ~doorState~0); 190282#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 191496#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 191742#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 190318#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 191106#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 191022#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 191024#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 191938#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 190888#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 189719#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 189617#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 189618#L1892-2 assume !(1 == ~currentHeading~0); 190904#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 190905#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 191291#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 191972#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 194551#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 194544#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 194543#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 191965#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 191966#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 194506#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 194454#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 194453#L890-2 [2024-11-09 15:55:15,018 INFO L747 eck$LassoCheckResult]: Loop: 194453#L890-2 assume !false; 194452#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 194451#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 194450#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 194449#L898 assume 1 != cleanup_~tmp___0~1#1; 194448#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 194447#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 194446#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 194444#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 194442#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 194441#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 194425#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 194420#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 194386#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 194358#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 194355#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 194352#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 194343#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 194218#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 194217#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 194216#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 194215#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 194213#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 194212#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 194211#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 194209#L2164-3 assume !(1 == ~doorState~0); 194208#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 194207#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 194203#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 193959#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 194201#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 193947#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 194199#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 194197#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 194013#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 193956#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 193950#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 193941#L1892-5 assume !(1 == ~currentHeading~0); 193932#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 193925#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 193921#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 193919#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 194673#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 194499#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 194474#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 194472#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 194465#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 194456#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 194455#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 194453#L890-2 [2024-11-09 15:55:15,018 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:15,018 INFO L85 PathProgramCache]: Analyzing trace with hash 1761456702, now seen corresponding path program 3 times [2024-11-09 15:55:15,018 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:15,018 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1036210510] [2024-11-09 15:55:15,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:15,019 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:15,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:15,069 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:15,069 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:15,069 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1036210510] [2024-11-09 15:55:15,069 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1036210510] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:15,069 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:15,070 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:15,070 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2026109905] [2024-11-09 15:55:15,070 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:15,070 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:15,071 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:15,071 INFO L85 PathProgramCache]: Analyzing trace with hash -1848245089, now seen corresponding path program 1 times [2024-11-09 15:55:15,071 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:15,071 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1454596773] [2024-11-09 15:55:15,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:15,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:15,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:15,145 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:15,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:15,145 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1454596773] [2024-11-09 15:55:15,146 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1454596773] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:15,146 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:15,146 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:15,146 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1860246765] [2024-11-09 15:55:15,146 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:15,146 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:15,146 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:15,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-09 15:55:15,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2024-11-09 15:55:15,147 INFO L87 Difference]: Start difference. First operand 12459 states and 22786 transitions. cyclomatic complexity: 10328 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:15,960 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:15,961 INFO L93 Difference]: Finished difference Result 17145 states and 31327 transitions. [2024-11-09 15:55:15,961 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17145 states and 31327 transitions. [2024-11-09 15:55:16,005 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13989 [2024-11-09 15:55:16,044 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17145 states to 17145 states and 31327 transitions. [2024-11-09 15:55:16,045 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17145 [2024-11-09 15:55:16,056 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17145 [2024-11-09 15:55:16,057 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17145 states and 31327 transitions. [2024-11-09 15:55:16,073 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:16,073 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17145 states and 31327 transitions. [2024-11-09 15:55:16,080 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17145 states and 31327 transitions. [2024-11-09 15:55:16,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17145 to 15867. [2024-11-09 15:55:16,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15867 states, 15867 states have (on average 1.8351925379718914) internal successors, (29119), 15866 states have internal predecessors, (29119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:16,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15867 states to 15867 states and 29119 transitions. [2024-11-09 15:55:16,209 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15867 states and 29119 transitions. [2024-11-09 15:55:16,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-11-09 15:55:16,210 INFO L425 stractBuchiCegarLoop]: Abstraction has 15867 states and 29119 transitions. [2024-11-09 15:55:16,210 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-09 15:55:16,210 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15867 states and 29119 transitions. [2024-11-09 15:55:16,246 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:16,246 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:16,246 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:16,250 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:16,250 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:16,251 INFO L745 eck$LassoCheckResult]: Stem: 219579#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 219580#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 220611#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 220123#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 220124#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 220125#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 220126#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 219442#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 219443#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 219599#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 219600#L3009 assume 0 == initPersonOnFloor_~floor#1; 220745#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 219654#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 220991#L2801 assume !(0 == callOnFloor_~floorID#1); 221344#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 220096#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 221562#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 221561#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 221560#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 221559#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 221558#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 221448#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 220720#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 219623#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 219625#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 221557#L2073 assume !(0 != timeShift_~tmp___9~2#1); 219898#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 219899#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 224509#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 224505#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 220542#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 224504#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 224448#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 224499#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 224497#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 224458#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 224454#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 219240#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 219241#L1892-2 assume !(1 == ~currentHeading~0); 220520#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 220521#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 221165#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 220702#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 220763#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 220764#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 224439#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 224425#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 224430#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 224428#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 224423#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 224422#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 224421#L890-2 [2024-11-09 15:55:16,251 INFO L747 eck$LassoCheckResult]: Loop: 224421#L890-2 assume !false; 224414#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 224415#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 224405#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 224406#L898 assume 1 != cleanup_~tmp___0~1#1; 223577#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 223578#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 223543#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 223544#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 223486#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 223487#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 224727#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 224728#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 224706#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 224699#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 224694#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 224695#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 224681#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 224676#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 224673#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 224634#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 224635#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 224610#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 224607#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 224598#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 224600#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 224583#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 224582#L2164-3 assume !(1 == ~doorState~0); 224572#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 224569#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 224269#L1685-2 assume !(0 == ~currentFloorID~0); 224237#L1691-2 assume ~currentFloorID~0 > 0; 224235#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 224236#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 224268#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 224233#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 224234#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 224998#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 224981#L1892-3 assume !(1 == ~currentHeading~0); 224972#L1902-9 assume !(0 == ~currentFloorID~0); 224964#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 224961#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 224959#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 224958#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 224956#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 224788#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 224785#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 224782#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 224773#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 224559#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 224560#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 224416#L890-2 assume !false; 224417#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 224408#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 224409#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 224403#L898 assume 1 != cleanup_~tmp___0~1#1; 224404#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 223557#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 223558#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 223508#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 223510#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 224766#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 224754#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 224715#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 224716#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 224696#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 224697#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 224683#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 224684#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 224717#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 224710#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 224689#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 224682#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 224679#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 224671#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 224660#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 220214#L2164-3 assume !(1 == ~doorState~0); 220215#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 224899#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 224900#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 224834#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 224923#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 224828#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 224920#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 224911#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 224853#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 224832#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 224829#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 224824#L1892-5 assume !(1 == ~currentHeading~0); 224818#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 224813#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 224810#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 224807#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 224806#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 224805#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 224804#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 224803#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 224798#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 224789#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 224768#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 224420#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 224421#L890-2 [2024-11-09 15:55:16,252 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:16,252 INFO L85 PathProgramCache]: Analyzing trace with hash 939081110, now seen corresponding path program 1 times [2024-11-09 15:55:16,252 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:16,252 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [139976577] [2024-11-09 15:55:16,252 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:16,252 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:16,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:16,294 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:16,294 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:16,294 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [139976577] [2024-11-09 15:55:16,294 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [139976577] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:16,294 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:16,294 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:16,294 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1075141535] [2024-11-09 15:55:16,295 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:16,295 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:16,295 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:16,295 INFO L85 PathProgramCache]: Analyzing trace with hash -1716848656, now seen corresponding path program 1 times [2024-11-09 15:55:16,295 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:16,295 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1448577903] [2024-11-09 15:55:16,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:16,295 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:16,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:16,364 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-09 15:55:16,364 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:16,364 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1448577903] [2024-11-09 15:55:16,364 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1448577903] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:16,364 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:16,364 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:16,365 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [928429065] [2024-11-09 15:55:16,365 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:16,365 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:16,365 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:16,365 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:55:16,365 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:55:16,366 INFO L87 Difference]: Start difference. First operand 15867 states and 29119 transitions. cyclomatic complexity: 13253 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:16,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:16,591 INFO L93 Difference]: Finished difference Result 15867 states and 29113 transitions. [2024-11-09 15:55:16,591 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15867 states and 29113 transitions. [2024-11-09 15:55:16,655 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:16,694 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15867 states to 15867 states and 29113 transitions. [2024-11-09 15:55:16,695 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15867 [2024-11-09 15:55:16,709 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15867 [2024-11-09 15:55:16,710 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15867 states and 29113 transitions. [2024-11-09 15:55:16,720 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:16,720 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15867 states and 29113 transitions. [2024-11-09 15:55:16,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15867 states and 29113 transitions. [2024-11-09 15:55:16,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15867 to 15867. [2024-11-09 15:55:16,864 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15867 states, 15867 states have (on average 1.8348143946555744) internal successors, (29113), 15866 states have internal predecessors, (29113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:16,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15867 states to 15867 states and 29113 transitions. [2024-11-09 15:55:16,888 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15867 states and 29113 transitions. [2024-11-09 15:55:16,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:55:16,892 INFO L425 stractBuchiCegarLoop]: Abstraction has 15867 states and 29113 transitions. [2024-11-09 15:55:16,892 INFO L332 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-11-09 15:55:16,892 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15867 states and 29113 transitions. [2024-11-09 15:55:16,933 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:16,934 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:16,934 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:16,937 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:16,937 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:16,938 INFO L745 eck$LassoCheckResult]: Stem: 251325#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 251326#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 252361#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 251873#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 251874#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 251871#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 251872#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 251186#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 251187#L104 assume !(0 == getOrigin_~person#1); 252668#L108 assume !(1 == getOrigin_~person#1); 251359#L112 assume !(2 == getOrigin_~person#1); 251360#L116 assume !(3 == getOrigin_~person#1); 252822#L120 assume !(4 == getOrigin_~person#1); 252581#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 251346#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 251347#L3009 assume 0 == initPersonOnFloor_~floor#1; 252495#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 251400#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 252737#L2801 assume !(0 == callOnFloor_~floorID#1); 253073#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 251844#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 253309#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 253308#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 253307#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 253306#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 253305#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 253191#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 252469#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 251369#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 251371#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 253304#L2073 assume !(0 != timeShift_~tmp___9~2#1); 251651#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 251652#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 251005#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 251006#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 251689#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 252476#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 252390#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 252392#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 253310#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 253311#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 257510#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 250985#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 250986#L1892-2 assume !(1 == ~currentHeading~0); 252271#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 252272#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 252661#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 252706#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 252707#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 252389#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 252100#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 251950#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 253335#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 253333#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 252614#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 252615#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 253327#L890-2 [2024-11-09 15:55:16,938 INFO L747 eck$LassoCheckResult]: Loop: 253327#L890-2 assume !false; 253326#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 253325#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 253324#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 253323#L898 assume 1 != cleanup_~tmp___0~1#1; 253322#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 253321#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 253320#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 253318#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 253315#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 253317#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 265200#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 265198#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 265112#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 265104#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 265103#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 265102#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 265101#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 265100#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 265096#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 265095#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 265094#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 265090#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 265084#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 265080#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 265078#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 265075#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 265073#L2164-3 assume !(1 == ~doorState~0); 255511#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 265070#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 265071#L1685-2 assume !(0 == ~currentFloorID~0); 265093#L1691-2 assume ~currentFloorID~0 > 0; 265091#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 265092#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 265255#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 264973#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 264952#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 264948#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 264945#L1892-3 assume !(1 == ~currentHeading~0); 264943#L1902-9 assume !(0 == ~currentFloorID~0); 264939#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 264936#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 264934#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 264933#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 264931#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 264928#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 264645#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 264650#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 264648#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 264642#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 264640#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 264638#L890-2 assume !false; 264636#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 264634#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 264632#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 264630#L898 assume 1 != cleanup_~tmp___0~1#1; 264628#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 264626#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 264623#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 264622#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 264621#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 253164#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 253165#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 252610#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 252178#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 251646#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 265290#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 265260#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 265251#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 265252#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 265585#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 265586#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 265589#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 265587#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 265584#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 265577#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 265576#L2164-3 assume !(1 == ~doorState~0); 257581#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 265575#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 265571#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 265499#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 265568#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 265493#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 265564#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 265562#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 265518#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 265497#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 265494#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 265489#L1892-5 assume !(1 == ~currentHeading~0); 265483#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 265478#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 265475#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 265472#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 265400#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 265398#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 265373#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 265352#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 265357#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 265355#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 265314#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 253328#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 253327#L890-2 [2024-11-09 15:55:16,939 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:16,939 INFO L85 PathProgramCache]: Analyzing trace with hash 1568280421, now seen corresponding path program 1 times [2024-11-09 15:55:16,939 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:16,939 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1375017699] [2024-11-09 15:55:16,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:16,939 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:16,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:17,101 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:17,101 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:17,101 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1375017699] [2024-11-09 15:55:17,101 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1375017699] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:17,101 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:17,101 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 15:55:17,101 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1411908802] [2024-11-09 15:55:17,101 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:17,101 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:17,102 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:17,102 INFO L85 PathProgramCache]: Analyzing trace with hash -717798668, now seen corresponding path program 1 times [2024-11-09 15:55:17,102 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:17,102 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [564915163] [2024-11-09 15:55:17,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:17,102 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:17,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:17,251 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-09 15:55:17,251 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:17,251 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [564915163] [2024-11-09 15:55:17,251 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [564915163] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:17,251 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:17,251 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:17,251 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1336685285] [2024-11-09 15:55:17,251 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:17,255 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:17,255 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:17,255 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-09 15:55:17,255 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-09 15:55:17,256 INFO L87 Difference]: Start difference. First operand 15867 states and 29113 transitions. cyclomatic complexity: 13247 Second operand has 6 states, 6 states have (on average 9.333333333333334) internal successors, (56), 6 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:17,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:17,409 INFO L93 Difference]: Finished difference Result 15861 states and 29100 transitions. [2024-11-09 15:55:17,409 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15861 states and 29100 transitions. [2024-11-09 15:55:17,448 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:17,476 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15861 states to 15861 states and 29100 transitions. [2024-11-09 15:55:17,477 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15861 [2024-11-09 15:55:17,484 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15861 [2024-11-09 15:55:17,484 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15861 states and 29100 transitions. [2024-11-09 15:55:17,491 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:17,491 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15861 states and 29100 transitions. [2024-11-09 15:55:17,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15861 states and 29100 transitions. [2024-11-09 15:55:17,597 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15861 to 15861. [2024-11-09 15:55:17,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15861 states, 15861 states have (on average 1.8346888594666162) internal successors, (29100), 15860 states have internal predecessors, (29100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:17,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15861 states to 15861 states and 29100 transitions. [2024-11-09 15:55:17,632 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15861 states and 29100 transitions. [2024-11-09 15:55:17,632 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-09 15:55:17,633 INFO L425 stractBuchiCegarLoop]: Abstraction has 15861 states and 29100 transitions. [2024-11-09 15:55:17,633 INFO L332 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2024-11-09 15:55:17,633 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15861 states and 29100 transitions. [2024-11-09 15:55:17,667 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:17,667 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:17,667 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:17,672 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:17,672 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:17,672 INFO L745 eck$LassoCheckResult]: Stem: 283069#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 283070#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 284116#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 283616#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 283617#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 283618#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 283619#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 282930#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 282931#L104 assume !(0 == getOrigin_~person#1); 284426#L108 assume !(1 == getOrigin_~person#1); 283104#L112 assume !(2 == getOrigin_~person#1); 283105#L116 assume !(3 == getOrigin_~person#1); 284587#L120 assume !(4 == getOrigin_~person#1); 284340#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 283090#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 283091#L3009 assume !(0 == initPersonOnFloor_~floor#1); 284015#L3036 assume 1 == initPersonOnFloor_~floor#1; 284016#L3037 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 283145#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 284498#L2801 assume !(0 == callOnFloor_~floorID#1); 284852#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 283588#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 285095#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 285094#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 285093#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 285092#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 285091#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 284966#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 284224#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 283114#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 283116#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 285089#L2073 assume !(0 != timeShift_~tmp___9~2#1); 283395#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 283396#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 282748#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 282749#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 283433#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 289914#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 285096#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 289913#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 289912#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 284010#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 282829#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 282727#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 282728#L1892-2 assume !(1 == ~currentHeading~0); 284024#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 284025#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 284419#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 284463#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 284464#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 284148#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 283846#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 283693#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 284995#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 285120#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 284372#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 284373#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 285115#L890-2 [2024-11-09 15:55:17,673 INFO L747 eck$LassoCheckResult]: Loop: 285115#L890-2 assume !false; 296299#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 285110#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 285109#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 285108#L898 assume 1 != cleanup_~tmp___0~1#1; 285107#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 285106#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 285105#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 285103#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 285101#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 284933#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 284934#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 284370#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 283925#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 283388#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 296956#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 296955#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 296954#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 296953#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 296949#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 296947#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 296948#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 296725#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 296719#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 296718#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 296716#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 296715#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 296712#L2164-3 assume !(1 == ~doorState~0); 287279#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 296709#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 296708#L1685-2 assume !(0 == ~currentFloorID~0); 296707#L1691-2 assume ~currentFloorID~0 > 0; 296705#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 296706#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 296760#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 296549#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 296529#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 296526#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 296487#L1892-3 assume !(1 == ~currentHeading~0); 296480#L1902-9 assume !(0 == ~currentFloorID~0); 296476#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 296473#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 296471#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 296469#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 296466#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 296461#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 296436#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 296441#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 296439#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 296403#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 296404#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 285113#L890-2 assume !false; 285111#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 285112#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 296250#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 296249#L898 assume 1 != cleanup_~tmp___0~1#1; 296248#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 296247#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 296246#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 296240#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 296237#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 296236#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 296228#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 296226#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 296223#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 296215#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 296214#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 296213#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 296211#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 296210#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 296205#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 296206#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 296209#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 296207#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 296208#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 296637#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 296635#L2164-3 assume !(1 == ~doorState~0); 289767#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 296633#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 296634#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 296600#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 296749#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 296597#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 296747#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 296745#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 296679#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 296673#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 296669#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 296670#L1892-5 assume !(1 == ~currentHeading~0); 296961#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 296946#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 296586#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 296579#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 296577#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 296576#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 296575#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 296445#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 296450#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 296448#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 296431#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 285114#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 285115#L890-2 [2024-11-09 15:55:17,673 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:17,673 INFO L85 PathProgramCache]: Analyzing trace with hash 1506540322, now seen corresponding path program 1 times [2024-11-09 15:55:17,673 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:17,673 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1669018054] [2024-11-09 15:55:17,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:17,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:17,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:17,727 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:17,728 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:17,728 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1669018054] [2024-11-09 15:55:17,728 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1669018054] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:17,728 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:17,728 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:55:17,728 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2105660292] [2024-11-09 15:55:17,728 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:17,730 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:17,731 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:17,731 INFO L85 PathProgramCache]: Analyzing trace with hash -717798668, now seen corresponding path program 2 times [2024-11-09 15:55:17,731 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:17,731 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [188590937] [2024-11-09 15:55:17,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:17,731 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:17,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:17,804 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-09 15:55:17,805 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:17,805 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [188590937] [2024-11-09 15:55:17,805 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [188590937] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:17,805 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:17,805 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:17,805 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [78254600] [2024-11-09 15:55:17,806 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:17,806 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:17,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:17,807 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 15:55:17,807 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 15:55:17,807 INFO L87 Difference]: Start difference. First operand 15861 states and 29100 transitions. cyclomatic complexity: 13240 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:17,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:17,916 INFO L93 Difference]: Finished difference Result 15871 states and 29111 transitions. [2024-11-09 15:55:17,916 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15871 states and 29111 transitions. [2024-11-09 15:55:18,133 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:18,207 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15871 states to 15871 states and 29111 transitions. [2024-11-09 15:55:18,208 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15871 [2024-11-09 15:55:18,220 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15871 [2024-11-09 15:55:18,220 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15871 states and 29111 transitions. [2024-11-09 15:55:18,230 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:18,231 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15871 states and 29111 transitions. [2024-11-09 15:55:18,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15871 states and 29111 transitions. [2024-11-09 15:55:18,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15871 to 15861. [2024-11-09 15:55:18,353 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15861 states, 15861 states have (on average 1.8344366685580984) internal successors, (29096), 15860 states have internal predecessors, (29096), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:18,376 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15861 states to 15861 states and 29096 transitions. [2024-11-09 15:55:18,376 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15861 states and 29096 transitions. [2024-11-09 15:55:18,377 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 15:55:18,378 INFO L425 stractBuchiCegarLoop]: Abstraction has 15861 states and 29096 transitions. [2024-11-09 15:55:18,378 INFO L332 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2024-11-09 15:55:18,378 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15861 states and 29096 transitions. [2024-11-09 15:55:18,418 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:18,418 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:18,418 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:18,421 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:18,422 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:18,422 INFO L745 eck$LassoCheckResult]: Stem: 314812#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 314813#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 315844#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 315349#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 315350#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 315351#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 315352#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 314674#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 314675#L104 assume !(0 == getOrigin_~person#1); 316155#L108 assume !(1 == getOrigin_~person#1); 314846#L112 assume !(2 == getOrigin_~person#1); 314847#L116 assume !(3 == getOrigin_~person#1); 316310#L120 assume !(4 == getOrigin_~person#1); 316065#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 314833#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 314834#L3009 assume !(0 == initPersonOnFloor_~floor#1); 315744#L3036 assume 1 == initPersonOnFloor_~floor#1; 315745#L3037 assume !(0 == initPersonOnFloor_~person#1); 316408#L3040 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 314887#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 316225#L2801 assume !(0 == callOnFloor_~floorID#1); 316554#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 315322#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 315509#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 316763#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 316762#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 316761#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 316760#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 316661#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 315950#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 314856#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 314858#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 316759#L2073 assume !(0 != timeShift_~tmp___9~2#1); 315133#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 315134#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 320987#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 316595#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 315776#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 315957#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 315876#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 315878#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 316248#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 315739#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 314573#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 314471#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 314472#L1892-2 assume !(1 == ~currentHeading~0); 315753#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 315754#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 316146#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 316193#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 316194#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 315874#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 315875#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 316789#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 316793#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 316792#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 316098#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 316099#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 316786#L890-2 [2024-11-09 15:55:18,422 INFO L747 eck$LassoCheckResult]: Loop: 316786#L890-2 assume !false; 316781#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 316782#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 316778#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 316777#L898 assume 1 != cleanup_~tmp___0~1#1; 316776#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 316775#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 316774#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 316772#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 316770#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 316636#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 316637#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 316096#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 315655#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 315128#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 328731#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 328730#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 328380#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 328194#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 328189#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 328185#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 328186#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 328198#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 328190#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 328187#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 328188#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 328415#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 328412#L2164-3 assume !(1 == ~doorState~0); 318994#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 328405#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 328406#L1685-2 assume !(0 == ~currentFloorID~0); 328476#L1691-2 assume ~currentFloorID~0 > 0; 328474#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 328475#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 328482#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 328360#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 328338#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 328336#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 328334#L1892-3 assume !(1 == ~currentHeading~0); 328333#L1902-9 assume !(0 == ~currentFloorID~0); 328331#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 328265#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 328260#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 328258#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 328256#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 328184#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 328183#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 328172#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 328173#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 328160#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 328161#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 316783#L890-2 assume !false; 316784#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 316779#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 316780#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 328725#L898 assume 1 != cleanup_~tmp___0~1#1; 328724#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 328723#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 328722#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 328721#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 328720#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 328719#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 328707#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 328705#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 328646#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 328638#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 328636#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 328635#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 328631#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 328630#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 328628#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 328627#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 328624#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 328623#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 328621#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 328620#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 328617#L2164-3 assume !(1 == ~doorState~0); 321055#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 328616#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 328612#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 328581#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 328610#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 328571#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 328607#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 328575#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 328549#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 328322#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 328282#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 328283#L1892-5 assume !(1 == ~currentHeading~0); 328326#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 328324#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 328263#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 328259#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 328257#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 328253#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 328254#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 328741#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 328740#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 328162#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 328163#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 316785#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 316786#L890-2 [2024-11-09 15:55:18,423 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:18,423 INFO L85 PathProgramCache]: Analyzing trace with hash -1612960446, now seen corresponding path program 1 times [2024-11-09 15:55:18,423 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:18,423 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1921536524] [2024-11-09 15:55:18,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:18,424 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:18,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:18,477 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:18,478 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:18,478 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1921536524] [2024-11-09 15:55:18,478 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1921536524] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:18,478 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:18,478 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:55:18,478 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [66313822] [2024-11-09 15:55:18,478 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:18,478 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:18,479 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:18,479 INFO L85 PathProgramCache]: Analyzing trace with hash -1716848656, now seen corresponding path program 2 times [2024-11-09 15:55:18,479 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:18,479 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1729732453] [2024-11-09 15:55:18,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:18,479 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:18,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:18,645 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-09 15:55:18,645 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:18,646 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1729732453] [2024-11-09 15:55:18,646 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1729732453] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:18,646 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:18,646 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:18,646 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [475713532] [2024-11-09 15:55:18,646 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:18,646 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:18,647 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:18,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 15:55:18,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 15:55:18,647 INFO L87 Difference]: Start difference. First operand 15861 states and 29096 transitions. cyclomatic complexity: 13236 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:18,820 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:18,820 INFO L93 Difference]: Finished difference Result 15871 states and 29107 transitions. [2024-11-09 15:55:18,820 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15871 states and 29107 transitions. [2024-11-09 15:55:18,892 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:18,938 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15871 states to 15871 states and 29107 transitions. [2024-11-09 15:55:18,939 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15871 [2024-11-09 15:55:18,953 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15871 [2024-11-09 15:55:18,953 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15871 states and 29107 transitions. [2024-11-09 15:55:18,967 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:18,967 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15871 states and 29107 transitions. [2024-11-09 15:55:18,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15871 states and 29107 transitions. [2024-11-09 15:55:19,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15871 to 15861. [2024-11-09 15:55:19,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15861 states, 15861 states have (on average 1.8341844776495808) internal successors, (29092), 15860 states have internal predecessors, (29092), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:19,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15861 states to 15861 states and 29092 transitions. [2024-11-09 15:55:19,178 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15861 states and 29092 transitions. [2024-11-09 15:55:19,178 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 15:55:19,180 INFO L425 stractBuchiCegarLoop]: Abstraction has 15861 states and 29092 transitions. [2024-11-09 15:55:19,180 INFO L332 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2024-11-09 15:55:19,180 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15861 states and 29092 transitions. [2024-11-09 15:55:19,233 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:19,233 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:19,233 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:19,238 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:19,238 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:19,238 INFO L745 eck$LassoCheckResult]: Stem: 346556#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 346557#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 347588#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 347093#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 347094#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 347095#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 347096#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 346418#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 346419#L104 assume !(0 == getOrigin_~person#1); 347899#L108 assume !(1 == getOrigin_~person#1); 346590#L112 assume !(2 == getOrigin_~person#1); 346591#L116 assume !(3 == getOrigin_~person#1); 348054#L120 assume !(4 == getOrigin_~person#1); 347809#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 346577#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 346578#L3009 assume !(0 == initPersonOnFloor_~floor#1); 347488#L3036 assume 1 == initPersonOnFloor_~floor#1; 347489#L3037 assume !(0 == initPersonOnFloor_~person#1); 348152#L3040 assume !(1 == initPersonOnFloor_~person#1); 346791#L3043 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 346631#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 347969#L2801 assume !(0 == callOnFloor_~floorID#1); 348298#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 347066#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 347253#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 348507#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 348506#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 348505#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 348504#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 348405#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 347694#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 346600#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 346602#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 348503#L2073 assume !(0 != timeShift_~tmp___9~2#1); 346877#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 346878#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 352731#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 348339#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 347520#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 347701#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 347620#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 347622#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 347992#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 347483#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 346317#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 346215#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 346216#L1892-2 assume !(1 == ~currentHeading~0); 347497#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 347498#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 347890#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 347937#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 347938#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 347618#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 347619#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 348533#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 348537#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 348536#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 347842#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 347843#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 348530#L890-2 [2024-11-09 15:55:19,239 INFO L747 eck$LassoCheckResult]: Loop: 348530#L890-2 assume !false; 348525#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 348526#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 348522#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 348521#L898 assume 1 != cleanup_~tmp___0~1#1; 348520#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 348519#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 348518#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 348516#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 348514#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 348380#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 348381#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 347840#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 347399#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 346872#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 360475#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 360474#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 360124#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 359938#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 359933#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 359929#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 359930#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 359942#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 359934#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 359931#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 359932#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 360159#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 360156#L2164-3 assume !(1 == ~doorState~0); 350738#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 360149#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 360150#L1685-2 assume !(0 == ~currentFloorID~0); 360220#L1691-2 assume ~currentFloorID~0 > 0; 360218#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 360219#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 360226#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 360104#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 360082#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 360080#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 360078#L1892-3 assume !(1 == ~currentHeading~0); 360077#L1902-9 assume !(0 == ~currentFloorID~0); 360075#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 360009#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 360004#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 360002#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 360000#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 359928#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 359927#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 359916#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 359917#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 359904#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 359905#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 348527#L890-2 assume !false; 348528#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 348523#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 348524#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 360469#L898 assume 1 != cleanup_~tmp___0~1#1; 360468#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 360467#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 360466#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 360465#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 360464#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 360463#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 360451#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 360449#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 360390#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 360382#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 360380#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 360379#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 360375#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 360374#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 360372#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 360371#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 360368#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 360367#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 360365#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 360364#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 360361#L2164-3 assume !(1 == ~doorState~0); 352799#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 360360#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 360356#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 360325#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 360354#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 360315#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 360351#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 360319#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 360293#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 360066#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 360026#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 360027#L1892-5 assume !(1 == ~currentHeading~0); 360070#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 360068#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 360007#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 360003#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 360001#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 359997#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 359998#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 360485#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 360484#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 359906#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 359907#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 348529#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 348530#L890-2 [2024-11-09 15:55:19,240 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:19,240 INFO L85 PathProgramCache]: Analyzing trace with hash -815271043, now seen corresponding path program 1 times [2024-11-09 15:55:19,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:19,241 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [952551097] [2024-11-09 15:55:19,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:19,241 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:19,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:19,316 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:19,317 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:19,317 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [952551097] [2024-11-09 15:55:19,317 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [952551097] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:19,317 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:19,317 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:55:19,318 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [889212695] [2024-11-09 15:55:19,318 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:19,318 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:19,318 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:19,318 INFO L85 PathProgramCache]: Analyzing trace with hash -1716848656, now seen corresponding path program 3 times [2024-11-09 15:55:19,319 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:19,319 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [561993937] [2024-11-09 15:55:19,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:19,319 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:19,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:19,431 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-09 15:55:19,431 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:19,431 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [561993937] [2024-11-09 15:55:19,431 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [561993937] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:19,431 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:19,431 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:19,431 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [360870294] [2024-11-09 15:55:19,431 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:19,432 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:19,432 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:19,432 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 15:55:19,432 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 15:55:19,432 INFO L87 Difference]: Start difference. First operand 15861 states and 29092 transitions. cyclomatic complexity: 13232 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:19,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:19,591 INFO L93 Difference]: Finished difference Result 15871 states and 29103 transitions. [2024-11-09 15:55:19,591 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15871 states and 29103 transitions. [2024-11-09 15:55:19,663 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:19,711 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15871 states to 15871 states and 29103 transitions. [2024-11-09 15:55:19,712 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15871 [2024-11-09 15:55:19,726 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15871 [2024-11-09 15:55:19,727 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15871 states and 29103 transitions. [2024-11-09 15:55:19,740 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:19,741 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15871 states and 29103 transitions. [2024-11-09 15:55:19,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15871 states and 29103 transitions. [2024-11-09 15:55:19,900 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15871 to 15861. [2024-11-09 15:55:19,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15861 states, 15861 states have (on average 1.833932286741063) internal successors, (29088), 15860 states have internal predecessors, (29088), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:19,946 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15861 states to 15861 states and 29088 transitions. [2024-11-09 15:55:19,947 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15861 states and 29088 transitions. [2024-11-09 15:55:19,948 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 15:55:19,949 INFO L425 stractBuchiCegarLoop]: Abstraction has 15861 states and 29088 transitions. [2024-11-09 15:55:19,950 INFO L332 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2024-11-09 15:55:19,950 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15861 states and 29088 transitions. [2024-11-09 15:55:20,003 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:20,003 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:20,004 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:20,008 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:20,008 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:20,008 INFO L745 eck$LassoCheckResult]: Stem: 378300#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 378301#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 379332#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 378837#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 378838#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 378839#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 378840#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 378162#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 378163#L104 assume !(0 == getOrigin_~person#1); 379643#L108 assume !(1 == getOrigin_~person#1); 378334#L112 assume !(2 == getOrigin_~person#1); 378335#L116 assume !(3 == getOrigin_~person#1); 379798#L120 assume !(4 == getOrigin_~person#1); 379553#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 378321#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 378322#L3009 assume !(0 == initPersonOnFloor_~floor#1); 379232#L3036 assume !(1 == initPersonOnFloor_~floor#1); 378850#L3063 assume !(2 == initPersonOnFloor_~floor#1); 378471#L3090 assume !(3 == initPersonOnFloor_~floor#1); 378473#L3117 assume !(4 == initPersonOnFloor_~floor#1); 378375#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 379713#L2801 assume !(0 == callOnFloor_~floorID#1); 380042#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 378810#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 378997#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 380251#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 380250#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 380249#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 380248#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 380149#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 379438#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 378344#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 378346#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 380247#L2073 assume !(0 != timeShift_~tmp___9~2#1); 378621#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 378622#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 384475#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 380083#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 379264#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 379445#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 379364#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 379366#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 379736#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 379227#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 378061#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 377959#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 377960#L1892-2 assume !(1 == ~currentHeading~0); 379241#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 379242#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 379634#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 379681#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 379682#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 379362#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 379363#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 380277#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 380281#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 380280#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 379586#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 379587#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 380274#L890-2 [2024-11-09 15:55:20,009 INFO L747 eck$LassoCheckResult]: Loop: 380274#L890-2 assume !false; 380269#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 380270#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 380266#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 380265#L898 assume 1 != cleanup_~tmp___0~1#1; 380264#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 380263#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 380262#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 380260#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 380258#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 380124#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 380125#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 379584#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 379143#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 378616#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 392219#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 392218#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 391868#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 391682#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 391677#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 391673#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 391674#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 391686#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 391678#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 391675#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 391676#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 391903#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 391900#L2164-3 assume !(1 == ~doorState~0); 382482#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 391893#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 391894#L1685-2 assume !(0 == ~currentFloorID~0); 391964#L1691-2 assume ~currentFloorID~0 > 0; 391962#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 391963#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 391970#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 391848#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 391826#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 391824#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 391822#L1892-3 assume !(1 == ~currentHeading~0); 391821#L1902-9 assume !(0 == ~currentFloorID~0); 391819#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 391753#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 391748#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 391746#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 391744#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 391672#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 391671#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 391660#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 391661#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 391648#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 391649#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 380271#L890-2 assume !false; 380272#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 380267#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 380268#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 392213#L898 assume 1 != cleanup_~tmp___0~1#1; 392212#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 392211#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 392210#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 392209#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 392208#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 392207#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 392195#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 392193#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 392134#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 392126#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 392124#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 392123#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 392119#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 392118#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 392116#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 392115#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 392112#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 392111#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 392109#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 392108#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 392105#L2164-3 assume !(1 == ~doorState~0); 384543#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 392104#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 392100#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 392069#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 392098#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 392059#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 392095#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 392063#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 392037#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 391810#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 391770#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 391771#L1892-5 assume !(1 == ~currentHeading~0); 391814#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 391812#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 391751#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 391747#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 391745#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 391741#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 391742#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 392229#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 392228#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 391650#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 391651#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 380273#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 380274#L890-2 [2024-11-09 15:55:20,010 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:20,010 INFO L85 PathProgramCache]: Analyzing trace with hash -192092419, now seen corresponding path program 1 times [2024-11-09 15:55:20,010 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:20,010 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1478689865] [2024-11-09 15:55:20,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:20,010 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:20,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:20,084 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:20,084 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:20,084 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1478689865] [2024-11-09 15:55:20,084 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1478689865] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:20,085 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:20,085 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:55:20,085 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [251584738] [2024-11-09 15:55:20,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:20,085 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:20,085 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:20,086 INFO L85 PathProgramCache]: Analyzing trace with hash -1716848656, now seen corresponding path program 4 times [2024-11-09 15:55:20,086 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:20,086 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [21280863] [2024-11-09 15:55:20,086 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:20,086 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:20,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:20,190 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-09 15:55:20,190 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:20,190 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [21280863] [2024-11-09 15:55:20,190 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [21280863] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:20,190 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:20,191 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:20,191 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1514843197] [2024-11-09 15:55:20,191 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:20,191 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:20,191 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:20,191 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 15:55:20,192 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 15:55:20,192 INFO L87 Difference]: Start difference. First operand 15861 states and 29088 transitions. cyclomatic complexity: 13228 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:20,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:20,267 INFO L93 Difference]: Finished difference Result 15840 states and 29054 transitions. [2024-11-09 15:55:20,267 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15840 states and 29054 transitions. [2024-11-09 15:55:20,335 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:20,377 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15840 states to 15840 states and 29054 transitions. [2024-11-09 15:55:20,378 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15840 [2024-11-09 15:55:20,388 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15840 [2024-11-09 15:55:20,388 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15840 states and 29054 transitions. [2024-11-09 15:55:20,401 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:20,401 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29054 transitions. [2024-11-09 15:55:20,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15840 states and 29054 transitions. [2024-11-09 15:55:20,823 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15840 to 15840. [2024-11-09 15:55:20,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15840 states, 15840 states have (on average 1.8342171717171718) internal successors, (29054), 15839 states have internal predecessors, (29054), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:20,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15840 states to 15840 states and 29054 transitions. [2024-11-09 15:55:20,859 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29054 transitions. [2024-11-09 15:55:20,862 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 15:55:20,863 INFO L425 stractBuchiCegarLoop]: Abstraction has 15840 states and 29054 transitions. [2024-11-09 15:55:20,863 INFO L332 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2024-11-09 15:55:20,863 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15840 states and 29054 transitions. [2024-11-09 15:55:20,901 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:20,901 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:20,901 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:20,905 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:20,905 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:20,905 INFO L745 eck$LassoCheckResult]: Stem: 410012#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 410013#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 411032#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 410551#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 410552#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 410553#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 410554#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 409874#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 409875#L104 assume !(0 == getOrigin_~person#1); 411334#L108 assume !(1 == getOrigin_~person#1); 410047#L112 assume !(2 == getOrigin_~person#1); 410048#L116 assume !(3 == getOrigin_~person#1); 411485#L120 assume !(4 == getOrigin_~person#1); 411247#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 410033#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 410034#L3009 assume !(0 == initPersonOnFloor_~floor#1); 410934#L3036 assume 1 == initPersonOnFloor_~floor#1; 410935#L3037 assume !(0 == initPersonOnFloor_~person#1); 411591#L3040 assume !(1 == initPersonOnFloor_~person#1); 410246#L3043 assume !(2 == initPersonOnFloor_~person#1); 410247#L3046 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 410088#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 411401#L2801 assume !(0 == callOnFloor_~floorID#1); 411742#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 410524#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 411974#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 411973#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 411972#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 411971#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 411970#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 411848#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 411138#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 410057#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 410059#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 411969#L2073 assume !(0 != timeShift_~tmp___9~2#1); 410333#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 410334#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 416984#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 411780#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 410370#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 411146#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 411064#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 411066#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 411975#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 411976#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 416877#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 416875#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 416876#L1892-2 assume !(1 == ~currentHeading~0); 410943#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 410944#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 411328#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 411372#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 411373#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 411062#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 411063#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 410320#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 410321#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 412002#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 411279#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 411280#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 411997#L890-2 [2024-11-09 15:55:20,906 INFO L747 eck$LassoCheckResult]: Loop: 411997#L890-2 assume !false; 423318#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 423316#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 423314#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 411990#L898 assume 1 != cleanup_~tmp___0~1#1; 411989#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 411988#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 411986#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 411987#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 411981#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 411822#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 411823#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 423035#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 410849#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 410328#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 423299#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 423297#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 423295#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 423289#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 423276#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 423270#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 423271#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 423293#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 423277#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 423272#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 423273#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 423676#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 423675#L2164-3 assume !(1 == ~doorState~0); 414191#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 423671#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 423670#L1685-2 assume !(0 == ~currentFloorID~0); 423669#L1691-2 assume ~currentFloorID~0 > 0; 423667#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 423668#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 423710#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 423571#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 423549#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 423547#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 423545#L1892-3 assume !(1 == ~currentHeading~0); 423402#L1902-9 assume !(0 == ~currentFloorID~0); 423395#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 423387#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 423379#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 423372#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 423367#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 423361#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 423334#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 423339#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 423337#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 423323#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 423321#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 411995#L890-2 assume !false; 411994#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 411993#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 411991#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 411992#L898 assume 1 != cleanup_~tmp___0~1#1; 423311#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 423309#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 423307#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 411983#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 411985#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 423302#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 411954#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 411277#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 411650#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 423015#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 423014#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 423013#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 423011#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 423010#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 423006#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 423007#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 423009#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 423008#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 423004#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 423005#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 424209#L2164-3 assume !(1 == ~doorState~0); 417133#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 424200#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 424197#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 424113#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 424195#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 424107#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 424192#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 424184#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 424132#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 424111#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 424108#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 424103#L1892-5 assume !(1 == ~currentHeading~0); 424097#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 424092#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 424089#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 424086#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 424085#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 424084#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 424083#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 424069#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 424074#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 424072#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 424067#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 411996#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 411997#L890-2 [2024-11-09 15:55:20,907 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:20,907 INFO L85 PathProgramCache]: Analyzing trace with hash 1156229373, now seen corresponding path program 1 times [2024-11-09 15:55:20,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:20,907 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [834930979] [2024-11-09 15:55:20,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:20,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:20,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:21,170 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:21,170 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:21,170 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [834930979] [2024-11-09 15:55:21,170 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [834930979] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:21,170 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:21,170 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:55:21,171 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [741353224] [2024-11-09 15:55:21,171 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:21,171 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:21,171 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:21,171 INFO L85 PathProgramCache]: Analyzing trace with hash -717798668, now seen corresponding path program 3 times [2024-11-09 15:55:21,171 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:21,171 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1993122945] [2024-11-09 15:55:21,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:21,172 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:21,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:21,235 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-09 15:55:21,235 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:21,235 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1993122945] [2024-11-09 15:55:21,235 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1993122945] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:21,235 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:21,235 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:21,235 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1321073106] [2024-11-09 15:55:21,235 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:21,236 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:21,236 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:21,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 15:55:21,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 15:55:21,237 INFO L87 Difference]: Start difference. First operand 15840 states and 29054 transitions. cyclomatic complexity: 13215 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 4 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:21,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:21,299 INFO L93 Difference]: Finished difference Result 15840 states and 29053 transitions. [2024-11-09 15:55:21,299 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15840 states and 29053 transitions. [2024-11-09 15:55:21,345 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:21,379 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15840 states to 15840 states and 29053 transitions. [2024-11-09 15:55:21,379 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15840 [2024-11-09 15:55:21,388 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15840 [2024-11-09 15:55:21,389 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15840 states and 29053 transitions. [2024-11-09 15:55:21,399 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:21,399 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29053 transitions. [2024-11-09 15:55:21,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15840 states and 29053 transitions. [2024-11-09 15:55:21,654 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15840 to 15840. [2024-11-09 15:55:21,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15840 states, 15840 states have (on average 1.8341540404040404) internal successors, (29053), 15839 states have internal predecessors, (29053), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:21,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15840 states to 15840 states and 29053 transitions. [2024-11-09 15:55:21,692 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29053 transitions. [2024-11-09 15:55:21,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 15:55:21,692 INFO L425 stractBuchiCegarLoop]: Abstraction has 15840 states and 29053 transitions. [2024-11-09 15:55:21,692 INFO L332 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2024-11-09 15:55:21,692 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15840 states and 29053 transitions. [2024-11-09 15:55:21,727 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:21,727 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:21,728 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:21,731 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:21,731 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:21,731 INFO L745 eck$LassoCheckResult]: Stem: 441704#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 441705#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 442731#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 442249#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 442250#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 442247#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 442248#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 441565#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 441566#L104 assume !(0 == getOrigin_~person#1); 443038#L108 assume !(1 == getOrigin_~person#1); 441738#L112 assume !(2 == getOrigin_~person#1); 441739#L116 assume !(3 == getOrigin_~person#1); 443196#L120 assume !(4 == getOrigin_~person#1); 442948#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 441728#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 441729#L3009 assume !(0 == initPersonOnFloor_~floor#1); 442630#L3036 assume 1 == initPersonOnFloor_~floor#1; 442631#L3037 assume !(0 == initPersonOnFloor_~person#1); 443306#L3040 assume !(1 == initPersonOnFloor_~person#1); 441938#L3043 assume !(2 == initPersonOnFloor_~person#1); 441939#L3046 assume !(3 == initPersonOnFloor_~person#1); 443524#L3049 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 441779#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 443108#L2801 assume !(0 == callOnFloor_~floorID#1); 443455#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 442219#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 443688#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 443687#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 443686#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 443685#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 443684#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 443566#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 442838#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 441748#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 441750#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 443682#L2073 assume !(0 != timeShift_~tmp___9~2#1); 442024#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 442025#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 441387#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 441388#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 442061#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 447908#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 443691#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 447907#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 447906#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 442627#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 441465#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 441367#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 441368#L1892-2 assume !(1 == ~currentHeading~0); 443258#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 443031#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 443032#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 443076#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 443077#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 442758#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 442759#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 441544#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 443653#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 442282#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 441543#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 442979#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 443712#L890-2 [2024-11-09 15:55:21,732 INFO L747 eck$LassoCheckResult]: Loop: 443712#L890-2 assume !false; 455155#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 455154#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 455153#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 455152#L898 assume 1 != cleanup_~tmp___0~1#1; 455151#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 455150#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 455148#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 443700#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 443702#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 443538#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 443539#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 455130#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 442546#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 442018#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 455149#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 455143#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 455129#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 455113#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 455107#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 454688#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 454689#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 455117#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 455108#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 454690#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 454543#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 454544#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 454978#L2164-3 assume !(1 == ~doorState~0); 445684#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 454975#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 454976#L1685-2 assume !(0 == ~currentFloorID~0); 455045#L1691-2 assume ~currentFloorID~0 > 0; 455040#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 455038#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 455018#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 454955#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 454927#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 454912#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 454799#L1892-3 assume !(1 == ~currentHeading~0); 454719#L1902-9 assume !(0 == ~currentFloorID~0); 454711#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 454705#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 454697#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 454698#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 454699#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 454536#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 454534#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 454535#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 445518#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 445517#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 443713#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 443711#L890-2 assume !false; 443710#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 443709#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 443708#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 443707#L898 assume 1 != cleanup_~tmp___0~1#1; 443706#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 443705#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 443703#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 443704#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 443697#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 443699#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 443665#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 442977#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 443366#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 455106#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 454687#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 454686#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 454681#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 454674#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 454670#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 454671#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 454675#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 454672#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 454673#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 454968#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 454933#L2164-3 assume !(1 == ~doorState~0); 447576#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 454910#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 454911#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 454784#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 455079#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 454780#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 455077#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 455075#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 455023#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 455017#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 454913#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 454800#L1892-5 assume !(1 == ~currentHeading~0); 454720#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 454712#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 454703#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 454701#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 454696#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 454693#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 454694#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 455158#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 455163#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 455161#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 455157#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 455156#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 443712#L890-2 [2024-11-09 15:55:21,732 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:21,732 INFO L85 PathProgramCache]: Analyzing trace with hash 861165528, now seen corresponding path program 1 times [2024-11-09 15:55:21,733 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:21,733 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [262018568] [2024-11-09 15:55:21,733 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:21,733 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:21,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:21,777 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:21,777 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:21,777 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [262018568] [2024-11-09 15:55:21,777 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [262018568] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:21,777 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:21,777 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:55:21,777 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [609236088] [2024-11-09 15:55:21,778 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:21,778 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:21,779 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:21,779 INFO L85 PathProgramCache]: Analyzing trace with hash -1226721358, now seen corresponding path program 1 times [2024-11-09 15:55:21,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:21,780 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [964698930] [2024-11-09 15:55:21,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:21,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:21,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:22,017 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-09 15:55:22,018 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:22,018 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [964698930] [2024-11-09 15:55:22,018 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [964698930] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:22,018 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:22,018 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:22,018 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1069547807] [2024-11-09 15:55:22,018 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:22,019 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:22,019 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:22,020 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 15:55:22,020 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 15:55:22,020 INFO L87 Difference]: Start difference. First operand 15840 states and 29053 transitions. cyclomatic complexity: 13214 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:22,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:22,105 INFO L93 Difference]: Finished difference Result 15840 states and 29052 transitions. [2024-11-09 15:55:22,105 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15840 states and 29052 transitions. [2024-11-09 15:55:22,178 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:22,225 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15840 states to 15840 states and 29052 transitions. [2024-11-09 15:55:22,225 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15840 [2024-11-09 15:55:22,240 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15840 [2024-11-09 15:55:22,240 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15840 states and 29052 transitions. [2024-11-09 15:55:22,253 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:22,253 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29052 transitions. [2024-11-09 15:55:22,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15840 states and 29052 transitions. [2024-11-09 15:55:22,409 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15840 to 15840. [2024-11-09 15:55:22,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15840 states, 15840 states have (on average 1.834090909090909) internal successors, (29052), 15839 states have internal predecessors, (29052), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:22,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15840 states to 15840 states and 29052 transitions. [2024-11-09 15:55:22,640 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29052 transitions. [2024-11-09 15:55:22,652 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 15:55:22,653 INFO L425 stractBuchiCegarLoop]: Abstraction has 15840 states and 29052 transitions. [2024-11-09 15:55:22,653 INFO L332 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2024-11-09 15:55:22,653 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15840 states and 29052 transitions. [2024-11-09 15:55:22,686 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:22,686 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:22,686 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:22,690 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:22,690 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:22,690 INFO L745 eck$LassoCheckResult]: Stem: 473396#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 473397#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 474425#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 473939#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 473940#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 473941#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 473942#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 473258#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 473259#L104 assume !(0 == getOrigin_~person#1); 474733#L108 assume !(1 == getOrigin_~person#1); 473430#L112 assume !(2 == getOrigin_~person#1); 473431#L116 assume !(3 == getOrigin_~person#1); 474887#L120 assume !(4 == getOrigin_~person#1); 474644#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 473420#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 473421#L3009 assume !(0 == initPersonOnFloor_~floor#1); 474323#L3036 assume 1 == initPersonOnFloor_~floor#1; 474324#L3037 assume !(0 == initPersonOnFloor_~person#1); 474992#L3040 assume !(1 == initPersonOnFloor_~person#1); 473629#L3043 assume !(2 == initPersonOnFloor_~person#1); 473630#L3046 assume !(3 == initPersonOnFloor_~person#1); 475202#L3049 assume !(4 == initPersonOnFloor_~person#1); 473470#L3052 assume !(5 == initPersonOnFloor_~person#1); 473471#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 474803#L2801 assume !(0 == callOnFloor_~floorID#1); 475140#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 473910#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 474095#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 473746#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 473747#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 473229#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 473230#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 475244#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 474532#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 473440#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 473442#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 475364#L2073 assume !(0 != timeShift_~tmp___9~2#1); 473717#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 473718#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 480058#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 475179#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 475075#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 474539#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 474456#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 474458#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 475370#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 475371#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 480029#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 480028#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 474944#L1892-2 assume !(1 == ~currentHeading~0); 474946#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 474724#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 474725#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 474772#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 474773#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 474453#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 474158#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 473237#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 474536#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 473975#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 473236#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 474678#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 475393#L890-2 [2024-11-09 15:55:22,691 INFO L747 eck$LassoCheckResult]: Loop: 475393#L890-2 assume !false; 486367#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 486366#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 486365#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 486364#L898 assume 1 != cleanup_~tmp___0~1#1; 486363#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486277#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 486278#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 475378#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 475380#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486360#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 486356#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 486352#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 474236#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 473709#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 486576#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 486575#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486573#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 486558#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 486553#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 486544#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 486545#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 486562#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 486554#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 486546#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 486290#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 486291#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 486851#L2164-3 assume !(1 == ~doorState~0); 477338#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 486728#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 486726#L1685-2 assume !(0 == ~currentFloorID~0); 486723#L1691-2 assume ~currentFloorID~0 > 0; 486722#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486720#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 486719#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 486631#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 486610#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 486606#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 486602#L1892-3 assume !(1 == ~currentHeading~0); 486596#L1902-9 assume !(0 == ~currentFloorID~0); 486591#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 486588#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 486586#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 486585#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 486583#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 486579#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 477199#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 477204#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 477202#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 477198#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 475392#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 475391#L890-2 assume !false; 475390#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 475388#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 475389#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 486532#L898 assume 1 != cleanup_~tmp___0~1#1; 486281#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486282#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 475381#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 475382#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 475376#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 475217#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 475218#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 474676#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 475055#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 486337#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 486336#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 486335#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 486333#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 486334#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 486513#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 486514#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 486516#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 486515#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 486288#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 486289#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 486488#L2164-3 assume !(1 == ~doorState~0); 480089#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 486485#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 486486#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 486415#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 486531#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 486409#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 486528#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 486498#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 486434#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 486413#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 486410#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 486405#L1892-5 assume !(1 == ~currentHeading~0); 486399#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 486394#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 486391#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 486388#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 486387#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 486386#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 486385#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 486371#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 486376#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 486374#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 486369#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 486368#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 475393#L890-2 [2024-11-09 15:55:22,692 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:22,692 INFO L85 PathProgramCache]: Analyzing trace with hash 1945246326, now seen corresponding path program 1 times [2024-11-09 15:55:22,692 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:22,692 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [677002846] [2024-11-09 15:55:22,692 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:22,692 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:22,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:22,724 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:22,724 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:22,724 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [677002846] [2024-11-09 15:55:22,725 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [677002846] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:22,725 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:22,725 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:22,725 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1567945001] [2024-11-09 15:55:22,725 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:22,725 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:22,725 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:22,726 INFO L85 PathProgramCache]: Analyzing trace with hash -717798668, now seen corresponding path program 4 times [2024-11-09 15:55:22,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:22,726 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [436850388] [2024-11-09 15:55:22,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:22,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:22,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:22,803 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-09 15:55:22,803 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:22,803 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [436850388] [2024-11-09 15:55:22,803 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [436850388] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:22,803 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:22,803 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:22,803 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [881186095] [2024-11-09 15:55:22,804 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:22,804 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:22,804 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:22,804 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:55:22,804 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:55:22,804 INFO L87 Difference]: Start difference. First operand 15840 states and 29052 transitions. cyclomatic complexity: 13213 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:22,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:22,858 INFO L93 Difference]: Finished difference Result 15840 states and 29051 transitions. [2024-11-09 15:55:22,858 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15840 states and 29051 transitions. [2024-11-09 15:55:22,914 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:22,952 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15840 states to 15840 states and 29051 transitions. [2024-11-09 15:55:22,952 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15840 [2024-11-09 15:55:22,965 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15840 [2024-11-09 15:55:22,965 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15840 states and 29051 transitions. [2024-11-09 15:55:22,975 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:22,975 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29051 transitions. [2024-11-09 15:55:22,984 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15840 states and 29051 transitions. [2024-11-09 15:55:23,187 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15840 to 15840. [2024-11-09 15:55:23,201 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15840 states, 15840 states have (on average 1.8340277777777778) internal successors, (29051), 15839 states have internal predecessors, (29051), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:23,224 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15840 states to 15840 states and 29051 transitions. [2024-11-09 15:55:23,225 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15840 states and 29051 transitions. [2024-11-09 15:55:23,225 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:55:23,225 INFO L425 stractBuchiCegarLoop]: Abstraction has 15840 states and 29051 transitions. [2024-11-09 15:55:23,226 INFO L332 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2024-11-09 15:55:23,226 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15840 states and 29051 transitions. [2024-11-09 15:55:23,266 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12733 [2024-11-09 15:55:23,267 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:23,267 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:23,270 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:23,270 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:23,271 INFO L745 eck$LassoCheckResult]: Stem: 505090#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 505091#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 506117#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 505637#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 505638#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 505635#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 505636#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 504951#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 504952#L104 assume !(0 == getOrigin_~person#1); 506429#L108 assume !(1 == getOrigin_~person#1); 505124#L112 assume !(2 == getOrigin_~person#1); 505125#L116 assume !(3 == getOrigin_~person#1); 506584#L120 assume !(4 == getOrigin_~person#1); 506343#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 505114#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 505115#L3009 assume !(0 == initPersonOnFloor_~floor#1); 506017#L3036 assume 1 == initPersonOnFloor_~floor#1; 506018#L3037 assume !(0 == initPersonOnFloor_~person#1); 506694#L3040 assume !(1 == initPersonOnFloor_~person#1); 505328#L3043 assume !(2 == initPersonOnFloor_~person#1); 505329#L3046 assume !(3 == initPersonOnFloor_~person#1); 506915#L3049 assume !(4 == initPersonOnFloor_~person#1); 505165#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 505166#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 506502#L2801 assume !(0 == callOnFloor_~floorID#1); 506846#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 505606#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 505790#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 505443#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 505444#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 504921#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 504922#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 506962#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 506227#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 505134#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 505136#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 507077#L2073 assume !(0 != timeShift_~tmp___9~2#1); 505414#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 505415#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 511174#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 511175#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 505450#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 511229#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 507085#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 511227#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 511225#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 506013#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 504852#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 504747#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 504748#L1892-2 assume !(1 == ~currentHeading~0); 506027#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 506028#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 506423#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 506470#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 506471#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 506150#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 506151#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 508919#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 514553#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 514551#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 507104#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 507102#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 507100#L890-2 [2024-11-09 15:55:23,271 INFO L747 eck$LassoCheckResult]: Loop: 507100#L890-2 assume !false; 507101#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 518813#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 507096#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 507095#L898 assume 1 != cleanup_~tmp___0~1#1; 507093#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 507094#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 518808#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 518805#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 518803#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 518804#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 519013#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 519008#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 505928#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 505407#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 519339#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 519338#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 519335#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 519223#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 519218#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 519217#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 519216#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 519214#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 519206#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 519204#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 519202#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 519199#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 519198#L2164-3 assume !(1 == ~doorState~0); 509270#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 519196#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 519191#L1685-2 assume !(0 == ~currentFloorID~0); 519189#L1691-2 assume ~currentFloorID~0 > 0; 519188#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 519187#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 519184#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 519087#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 519066#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 519062#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 519058#L1892-3 assume !(1 == ~currentHeading~0); 519052#L1902-9 assume !(0 == ~currentFloorID~0); 519047#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 519044#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 519042#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 519041#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 519039#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 519036#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 519022#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 519027#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 519025#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 518314#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 518315#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 518814#L890-2 assume !false; 507099#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 507097#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 507098#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 518812#L898 assume 1 != cleanup_~tmp___0~1#1; 518811#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 507092#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 507091#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 507089#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 507088#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 506930#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 506931#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 506372#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 506756#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 518997#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 518996#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 518995#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 518993#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 518991#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 518989#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 518986#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 518985#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 518984#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 518979#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 518977#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 518975#L2164-3 assume !(1 == ~doorState~0); 511323#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 518970#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 518966#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 518880#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 518965#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 518857#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 518948#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 518944#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 518864#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 518858#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 518854#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 518852#L1892-5 assume !(1 == ~currentHeading~0); 518846#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 518844#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 518843#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 518840#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 518839#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 518837#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 518836#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 518835#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 518827#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 518817#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 518816#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 507103#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 507100#L890-2 [2024-11-09 15:55:23,272 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:23,272 INFO L85 PathProgramCache]: Analyzing trace with hash -977913672, now seen corresponding path program 1 times [2024-11-09 15:55:23,272 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:23,272 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [948049564] [2024-11-09 15:55:23,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:23,272 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:23,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:23,315 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:23,315 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:23,316 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [948049564] [2024-11-09 15:55:23,316 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [948049564] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:23,316 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:23,316 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:23,316 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1230500007] [2024-11-09 15:55:23,316 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:23,316 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:23,316 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:23,317 INFO L85 PathProgramCache]: Analyzing trace with hash -1207925966, now seen corresponding path program 2 times [2024-11-09 15:55:23,317 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:23,317 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1048239876] [2024-11-09 15:55:23,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:23,317 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:23,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:23,373 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-09 15:55:23,373 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:23,373 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1048239876] [2024-11-09 15:55:23,373 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1048239876] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:23,374 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:23,374 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:23,374 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1644944799] [2024-11-09 15:55:23,374 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:23,374 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:23,374 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:23,374 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 15:55:23,375 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 15:55:23,375 INFO L87 Difference]: Start difference. First operand 15840 states and 29051 transitions. cyclomatic complexity: 13212 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:23,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:23,633 INFO L93 Difference]: Finished difference Result 28063 states and 51408 transitions. [2024-11-09 15:55:23,633 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28063 states and 51408 transitions. [2024-11-09 15:55:23,741 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24908 [2024-11-09 15:55:23,816 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28063 states to 28063 states and 51408 transitions. [2024-11-09 15:55:23,817 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28063 [2024-11-09 15:55:23,838 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28063 [2024-11-09 15:55:23,838 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28063 states and 51408 transitions. [2024-11-09 15:55:23,856 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:23,857 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28063 states and 51408 transitions. [2024-11-09 15:55:23,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28063 states and 51408 transitions. [2024-11-09 15:55:24,190 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28063 to 28043. [2024-11-09 15:55:24,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28043 states, 28043 states have (on average 1.8321149663017509) internal successors, (51378), 28042 states have internal predecessors, (51378), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:24,271 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28043 states to 28043 states and 51378 transitions. [2024-11-09 15:55:24,272 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28043 states and 51378 transitions. [2024-11-09 15:55:24,272 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 15:55:24,273 INFO L425 stractBuchiCegarLoop]: Abstraction has 28043 states and 51378 transitions. [2024-11-09 15:55:24,273 INFO L332 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2024-11-09 15:55:24,273 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28043 states and 51378 transitions. [2024-11-09 15:55:24,366 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24888 [2024-11-09 15:55:24,367 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:24,367 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:24,380 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:24,380 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:24,380 INFO L745 eck$LassoCheckResult]: Stem: 549002#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 549003#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 550015#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 549539#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 549540#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 549541#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 549542#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 548863#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 548864#L104 assume !(0 == getOrigin_~person#1); 550321#L108 assume !(1 == getOrigin_~person#1); 549036#L112 assume !(2 == getOrigin_~person#1); 549037#L116 assume !(3 == getOrigin_~person#1); 550465#L120 assume !(4 == getOrigin_~person#1); 550235#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 549026#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 549027#L3009 assume !(0 == initPersonOnFloor_~floor#1); 549918#L3036 assume 1 == initPersonOnFloor_~floor#1; 549919#L3037 assume !(0 == initPersonOnFloor_~person#1); 550569#L3040 assume !(1 == initPersonOnFloor_~person#1); 549234#L3043 assume !(2 == initPersonOnFloor_~person#1); 549235#L3046 assume !(3 == initPersonOnFloor_~person#1); 550782#L3049 assume !(4 == initPersonOnFloor_~person#1); 549076#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 549077#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 550385#L2801 assume !(0 == callOnFloor_~floorID#1); 550722#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 549510#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 550932#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 550931#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 550930#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 550929#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 550928#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 550831#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 550127#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 549046#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 549048#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 550927#L2073 assume !(0 != timeShift_~tmp___9~2#1); 549319#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 549320#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 548684#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 548685#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 549866#L1520 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 549868#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 550134#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 550048#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 550050#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 550409#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 550933#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 550402#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 550403#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 550522#L1892-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 550523#isTopFloor_returnLabel#5 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 550072#L1896-6 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 550073#L1902-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 553168#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 558011#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 558008#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 558005#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 558003#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 557965#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 557970#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 557968#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 557951#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 557948#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 557947#L890-2 [2024-11-09 15:55:24,381 INFO L747 eck$LassoCheckResult]: Loop: 557947#L890-2 assume !false; 557946#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 554317#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 554316#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 554290#L898 assume 1 != cleanup_~tmp___0~1#1; 553257#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 553111#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 553112#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 557014#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 553030#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 553027#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 553004#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 552995#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 552962#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 552948#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 552886#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 552883#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 552864#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 552858#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 552840#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 552834#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 552828#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 552820#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 552811#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 552808#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 552804#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 552801#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 552798#L2164-3 assume !(1 == ~doorState~0); 552795#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 552794#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 552793#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 552791#L1520-2 assume !(0 != stopRequestedInDirection_~tmp~15#1); 552789#L1526-2 assume ~currentFloorID~0 < 0; 552787#L1527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 552788#L2738-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 552790#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret54#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1; 552785#L1531-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 552786#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 552885#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 553357#L1892-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 553348#isTopFloor_returnLabel#7 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 553337#L1896-9 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 553324#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 553314#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 553309#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 553307#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 553302#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 553298#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 554499#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 554500#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 553243#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 553240#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 553142#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 553137#L890-2 assume !false; 553132#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 553130#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 553127#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 553128#L898 assume 1 != cleanup_~tmp___0~1#1; 553097#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 553098#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 553039#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 551723#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 551725#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 553270#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 553262#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 553258#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 553259#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 553102#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 553103#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 553036#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 553037#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 554330#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 554329#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 554328#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 554327#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 554326#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 554325#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 554324#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 554322#L2164-3 assume !(1 == ~doorState~0); 553641#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 553642#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 554320#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 553637#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 554315#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 554308#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 554304#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 554305#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 553570#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 553565#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 553562#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 553563#L1892-5 assume !(1 == ~currentHeading~0); 558026#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 553333#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 553321#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 558012#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 558009#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 558006#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 558004#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 558001#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 557995#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 557973#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 557952#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 557949#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 557947#L890-2 [2024-11-09 15:55:24,382 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:24,386 INFO L85 PathProgramCache]: Analyzing trace with hash -510371608, now seen corresponding path program 1 times [2024-11-09 15:55:24,386 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:24,386 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [924407732] [2024-11-09 15:55:24,386 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:24,387 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:24,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:24,467 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:24,468 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:24,468 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [924407732] [2024-11-09 15:55:24,468 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [924407732] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:24,469 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:24,469 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 15:55:24,469 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [102323754] [2024-11-09 15:55:24,469 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:24,470 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:24,470 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:24,470 INFO L85 PathProgramCache]: Analyzing trace with hash 1313774649, now seen corresponding path program 1 times [2024-11-09 15:55:24,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:24,470 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [53925602] [2024-11-09 15:55:24,471 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:24,471 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:24,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:24,556 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-11-09 15:55:24,556 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:24,556 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [53925602] [2024-11-09 15:55:24,557 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [53925602] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:24,557 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:24,557 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:24,557 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1335126300] [2024-11-09 15:55:24,557 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:24,557 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:24,557 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:24,558 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 15:55:24,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 15:55:24,558 INFO L87 Difference]: Start difference. First operand 28043 states and 51378 transitions. cyclomatic complexity: 23336 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:24,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:24,748 INFO L93 Difference]: Finished difference Result 28063 states and 51352 transitions. [2024-11-09 15:55:24,748 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28063 states and 51352 transitions. [2024-11-09 15:55:25,035 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24908 [2024-11-09 15:55:25,097 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28063 states to 28063 states and 51352 transitions. [2024-11-09 15:55:25,098 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28063 [2024-11-09 15:55:25,118 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28063 [2024-11-09 15:55:25,119 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28063 states and 51352 transitions. [2024-11-09 15:55:25,135 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:25,135 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28063 states and 51352 transitions. [2024-11-09 15:55:25,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28063 states and 51352 transitions. [2024-11-09 15:55:25,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28063 to 28043. [2024-11-09 15:55:25,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28043 states, 28043 states have (on average 1.8301180330207183) internal successors, (51322), 28042 states have internal predecessors, (51322), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:25,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28043 states to 28043 states and 51322 transitions. [2024-11-09 15:55:25,380 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28043 states and 51322 transitions. [2024-11-09 15:55:25,380 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 15:55:25,381 INFO L425 stractBuchiCegarLoop]: Abstraction has 28043 states and 51322 transitions. [2024-11-09 15:55:25,381 INFO L332 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2024-11-09 15:55:25,381 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28043 states and 51322 transitions. [2024-11-09 15:55:25,456 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24888 [2024-11-09 15:55:25,457 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:25,457 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:25,464 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:25,464 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:25,465 INFO L745 eck$LassoCheckResult]: Stem: 605122#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 605123#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 606144#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 605663#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 605664#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 605665#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 605666#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 604984#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 604985#L104 assume !(0 == getOrigin_~person#1); 606451#L108 assume !(1 == getOrigin_~person#1); 605157#L112 assume !(2 == getOrigin_~person#1); 605158#L116 assume !(3 == getOrigin_~person#1); 606603#L120 assume !(4 == getOrigin_~person#1); 606360#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 605146#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 605147#L3009 assume !(0 == initPersonOnFloor_~floor#1); 606045#L3036 assume 1 == initPersonOnFloor_~floor#1; 606046#L3037 assume !(0 == initPersonOnFloor_~person#1); 606708#L3040 assume !(1 == initPersonOnFloor_~person#1); 605357#L3043 assume !(2 == initPersonOnFloor_~person#1); 605358#L3046 assume !(3 == initPersonOnFloor_~person#1); 606936#L3049 assume !(4 == initPersonOnFloor_~person#1); 605197#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 605198#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 606521#L2801 assume !(0 == callOnFloor_~floorID#1); 606862#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 605634#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 607102#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 607101#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 607100#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 607099#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 607098#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 606981#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 606249#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 605167#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 605169#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 607096#L2073 assume !(0 != timeShift_~tmp___9~2#1); 605442#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 605443#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 604804#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 604805#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 605992#L1520 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 605994#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 609283#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 606174#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 606176#getReverseHeading_returnLabel#1 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 607103#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 607104#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 606538#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 606539#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 606660#L1892-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 606661#isTopFloor_returnLabel#5 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 606198#L1896-6 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 606199#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 609223#L1908-5 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 609220#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 609219#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 609218#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 609217#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 609203#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 609208#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 609206#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 609201#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 609200#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 609197#L890-2 [2024-11-09 15:55:25,465 INFO L747 eck$LassoCheckResult]: Loop: 609197#L890-2 assume !false; 609192#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 609190#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 609185#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 609183#L898 assume 1 != cleanup_~tmp___0~1#1; 609181#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 609179#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 609040#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 607865#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 607867#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 609389#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 619477#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 619476#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 619467#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 619463#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 609311#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 609312#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 609293#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 609294#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 628882#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 628881#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 628880#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 628879#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 628875#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 628873#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 628867#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 628865#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 607816#L2164-3 assume !(1 == ~doorState~0); 607814#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 607808#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 607809#L1685-2 assume !(0 == ~currentFloorID~0); 607407#L1691-2 assume ~currentFloorID~0 > 0; 607405#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 607406#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 607787#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 607403#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 607404#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 608568#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 609493#L1892-3 assume !(1 == ~currentHeading~0); 609483#L1902-9 assume !(0 == ~currentFloorID~0); 609473#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 609469#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 609466#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 609465#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 609464#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 609460#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 614886#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 614891#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 614889#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 614884#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 614883#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 614882#L890-2 assume !false; 614881#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 614880#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 614879#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 614878#L898 assume 1 != cleanup_~tmp___0~1#1; 614877#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 614876#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 614875#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 614874#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 614873#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 609388#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 609384#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 609383#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 609329#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 609317#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 609318#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 609302#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 609303#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 619462#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 619387#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 619388#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 605711#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 605712#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 606276#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 619185#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 605752#L2164-3 assume !(1 == ~doorState~0); 605753#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 610434#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 610435#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 610400#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 610390#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 610388#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 610383#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 610381#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 610343#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 610337#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 610336#L2181-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 609551#L1947-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 609547#getReverseHeading_returnLabel#4 timeShift_#t~ret89#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 609511#L1892-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 609507#isTopFloor_returnLabel#9 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 609496#L1896-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 609487#L1902-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 609475#L1908-9 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 609471#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 609467#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 609462#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 609458#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 609456#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 609457#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 609443#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 609442#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 609199#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 609197#L890-2 [2024-11-09 15:55:25,466 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:25,466 INFO L85 PathProgramCache]: Analyzing trace with hash 190692970, now seen corresponding path program 1 times [2024-11-09 15:55:25,466 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:25,466 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2007497565] [2024-11-09 15:55:25,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:25,466 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:25,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:25,883 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:25,884 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:25,887 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2007497565] [2024-11-09 15:55:25,887 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2007497565] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:25,887 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:25,887 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:55:25,887 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [865925200] [2024-11-09 15:55:25,887 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:25,888 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:25,888 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:25,888 INFO L85 PathProgramCache]: Analyzing trace with hash -175750004, now seen corresponding path program 1 times [2024-11-09 15:55:25,888 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:25,888 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1554903557] [2024-11-09 15:55:25,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:25,888 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:25,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:26,044 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-09 15:55:26,045 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:26,045 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1554903557] [2024-11-09 15:55:26,045 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1554903557] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:26,045 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:26,045 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:26,045 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1189851135] [2024-11-09 15:55:26,045 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:26,045 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:26,045 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:26,046 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 15:55:26,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 15:55:26,046 INFO L87 Difference]: Start difference. First operand 28043 states and 51322 transitions. cyclomatic complexity: 23280 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:26,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:26,407 INFO L93 Difference]: Finished difference Result 31682 states and 57993 transitions. [2024-11-09 15:55:26,407 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31682 states and 57993 transitions. [2024-11-09 15:55:26,520 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28286 [2024-11-09 15:55:26,598 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31682 states to 31682 states and 57993 transitions. [2024-11-09 15:55:26,598 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31682 [2024-11-09 15:55:26,621 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31682 [2024-11-09 15:55:26,621 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31682 states and 57993 transitions. [2024-11-09 15:55:26,641 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:26,642 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31682 states and 57993 transitions. [2024-11-09 15:55:26,657 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31682 states and 57993 transitions. [2024-11-09 15:55:27,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31682 to 31430. [2024-11-09 15:55:27,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31430 states, 31430 states have (on average 1.8326121539930003) internal successors, (57599), 31429 states have internal predecessors, (57599), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:27,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31430 states to 31430 states and 57599 transitions. [2024-11-09 15:55:27,099 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31430 states and 57599 transitions. [2024-11-09 15:55:27,099 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 15:55:27,100 INFO L425 stractBuchiCegarLoop]: Abstraction has 31430 states and 57599 transitions. [2024-11-09 15:55:27,100 INFO L332 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2024-11-09 15:55:27,100 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31430 states and 57599 transitions. [2024-11-09 15:55:27,184 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28144 [2024-11-09 15:55:27,184 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:27,184 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:27,191 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:27,191 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:27,191 INFO L745 eck$LassoCheckResult]: Stem: 664866#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 664867#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 665879#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 665408#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 665409#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 665406#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 665407#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 664727#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 664728#L104 assume !(0 == getOrigin_~person#1); 666181#L108 assume !(1 == getOrigin_~person#1); 664901#L112 assume !(2 == getOrigin_~person#1); 664902#L116 assume !(3 == getOrigin_~person#1); 666328#L120 assume !(4 == getOrigin_~person#1); 666092#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 664891#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 664892#L3009 assume !(0 == initPersonOnFloor_~floor#1); 665780#L3036 assume 1 == initPersonOnFloor_~floor#1; 665781#L3037 assume !(0 == initPersonOnFloor_~person#1); 666439#L3040 assume !(1 == initPersonOnFloor_~person#1); 665102#L3043 assume !(2 == initPersonOnFloor_~person#1); 665103#L3046 assume !(3 == initPersonOnFloor_~person#1); 666650#L3049 assume !(4 == initPersonOnFloor_~person#1); 664941#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 664942#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 666248#L2801 assume !(0 == callOnFloor_~floorID#1); 666591#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 665377#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 666788#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 666787#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 666786#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 666785#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 666784#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 666692#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 665986#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 664911#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 664913#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 666782#L2073 assume !(0 != timeShift_~tmp___9~2#1); 665185#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 665186#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 664545#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 664546#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 665730#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 665731#L1526 assume !(~currentFloorID~0 < 0); 666605#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 665881#$Ultimate##1986 assume ~currentFloorID~0 < 1; 665714#L1556 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 665716#$Ultimate##2002 assume ~currentFloorID~0 < 1; 665340#L1572 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 665342#L1573 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 666794#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 666795#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 664669#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 664670#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 665268#L1896 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 665269#L1902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 669034#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 669031#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 669028#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 669019#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 669018#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 668999#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 669004#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 669002#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 668996#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 668994#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 668993#L890-2 [2024-11-09 15:55:27,192 INFO L747 eck$LassoCheckResult]: Loop: 668993#L890-2 assume !false; 668992#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 668991#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 668990#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 668989#L898 assume 1 != cleanup_~tmp___0~1#1; 668988#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 668987#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 668986#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 668981#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 668442#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 668443#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 668339#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 668340#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 668318#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 668305#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 668301#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 668299#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 668296#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 668243#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 668226#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 668187#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 668177#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 668173#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 668165#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 668001#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 667993#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 667090#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 667088#L2164-3 assume !(1 == ~doorState~0); 667083#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 667081#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 667079#L1685-2 assume !(0 == ~currentFloorID~0); 667080#L1691-2 assume ~currentFloorID~0 > 0; 667619#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 667089#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 667084#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 667085#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 667618#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 670729#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 670728#L1892-3 assume !(1 == ~currentHeading~0); 670727#L1902-9 assume !(0 == ~currentFloorID~0); 668658#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 670724#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 670722#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 670721#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 670719#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 670716#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 670715#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 670714#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 670705#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 670704#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 670672#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 670670#L890-2 assume !false; 670669#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 670668#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 670667#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 670666#L898 assume 1 != cleanup_~tmp___0~1#1; 670665#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 670664#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 670276#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 667543#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 667545#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 668346#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 668347#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 668337#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 668338#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 668963#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 668961#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 668959#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 668956#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 668954#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 668952#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 668950#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 668948#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 668945#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 668944#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 668942#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 668940#L2164-3 assume !(1 == ~doorState~0); 668936#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 668934#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 668935#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 669503#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 669502#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 669500#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 669499#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 669497#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 669173#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 669140#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 669064#L2181-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 669065#L1947-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 669155#getReverseHeading_returnLabel#4 timeShift_#t~ret89#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 669069#L1892-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 669060#isTopFloor_returnLabel#9 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 669047#L1896-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 669042#L1902-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 669039#L1908-9 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 669038#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 669037#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 669036#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 669032#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 669008#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 669013#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 669011#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 668997#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 668995#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 668993#L890-2 [2024-11-09 15:55:27,193 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:27,193 INFO L85 PathProgramCache]: Analyzing trace with hash -1384011050, now seen corresponding path program 1 times [2024-11-09 15:55:27,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:27,193 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1837868697] [2024-11-09 15:55:27,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:27,193 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:27,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:27,248 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:27,248 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:27,248 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1837868697] [2024-11-09 15:55:27,249 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1837868697] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:27,249 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:27,249 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 15:55:27,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1061892327] [2024-11-09 15:55:27,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:27,249 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:27,249 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:27,249 INFO L85 PathProgramCache]: Analyzing trace with hash 233074384, now seen corresponding path program 2 times [2024-11-09 15:55:27,249 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:27,249 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1800890937] [2024-11-09 15:55:27,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:27,250 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:27,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:27,311 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-09 15:55:27,312 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:27,312 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1800890937] [2024-11-09 15:55:27,312 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1800890937] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:27,312 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:27,312 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:27,312 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1839686567] [2024-11-09 15:55:27,312 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:27,312 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:27,313 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:27,313 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 15:55:27,313 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 15:55:27,313 INFO L87 Difference]: Start difference. First operand 31430 states and 57599 transitions. cyclomatic complexity: 26171 Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:27,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:27,697 INFO L93 Difference]: Finished difference Result 31664 states and 57665 transitions. [2024-11-09 15:55:27,697 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31664 states and 57665 transitions. [2024-11-09 15:55:27,841 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28372 [2024-11-09 15:55:27,936 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31664 states to 31664 states and 57665 transitions. [2024-11-09 15:55:27,936 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31664 [2024-11-09 15:55:27,962 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31664 [2024-11-09 15:55:27,963 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31664 states and 57665 transitions. [2024-11-09 15:55:27,988 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:27,989 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31664 states and 57665 transitions. [2024-11-09 15:55:28,008 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31664 states and 57665 transitions. [2024-11-09 15:55:28,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31664 to 31430. [2024-11-09 15:55:28,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31430 states, 31430 states have (on average 1.8219217308304168) internal successors, (57263), 31429 states have internal predecessors, (57263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:28,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31430 states to 31430 states and 57263 transitions. [2024-11-09 15:55:28,376 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31430 states and 57263 transitions. [2024-11-09 15:55:28,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 15:55:28,377 INFO L425 stractBuchiCegarLoop]: Abstraction has 31430 states and 57263 transitions. [2024-11-09 15:55:28,377 INFO L332 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2024-11-09 15:55:28,377 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31430 states and 57263 transitions. [2024-11-09 15:55:28,481 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28144 [2024-11-09 15:55:28,481 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:28,481 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:28,489 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:28,489 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:28,490 INFO L745 eck$LassoCheckResult]: Stem: 727972#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 727973#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 728995#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 728510#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 728511#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 728512#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 728513#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 727832#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 727833#L104 assume !(0 == getOrigin_~person#1); 729307#L108 assume !(1 == getOrigin_~person#1); 728006#L112 assume !(2 == getOrigin_~person#1); 728007#L116 assume !(3 == getOrigin_~person#1); 729465#L120 assume !(4 == getOrigin_~person#1); 729216#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 727996#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 727997#L3009 assume !(0 == initPersonOnFloor_~floor#1); 728898#L3036 assume 1 == initPersonOnFloor_~floor#1; 728899#L3037 assume !(0 == initPersonOnFloor_~person#1); 729569#L3040 assume !(1 == initPersonOnFloor_~person#1); 728207#L3043 assume !(2 == initPersonOnFloor_~person#1); 728208#L3046 assume !(3 == initPersonOnFloor_~person#1); 729782#L3049 assume !(4 == initPersonOnFloor_~person#1); 728047#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 728048#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 729379#L2801 assume !(0 == callOnFloor_~floorID#1); 729722#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 728481#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 729945#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 729944#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 729943#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 729942#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 729941#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 729833#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 729102#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 728016#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 728018#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 729939#L2073 assume !(0 != timeShift_~tmp___9~2#1); 728291#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 728292#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 729507#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 729416#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 729417#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 729739#L1526 assume !(~currentFloorID~0 < 0); 729740#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 728997#$Ultimate##1986 assume ~currentFloorID~0 < 1; 728998#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 729868#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 729869#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 728632#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 728633#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 729951#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 729952#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 727775#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 727776#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 728375#L1896 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 728376#L1902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 731922#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 731920#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 731919#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 731918#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 731917#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 731903#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 731908#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 731906#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 731901#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 731899#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 731796#L890-2 [2024-11-09 15:55:28,490 INFO L747 eck$LassoCheckResult]: Loop: 731796#L890-2 assume !false; 731638#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 731572#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 731566#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 731508#L898 assume 1 != cleanup_~tmp___0~1#1; 731507#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 731506#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 731503#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 730108#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 730110#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 731385#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 731375#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 731376#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 731316#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 731291#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 731288#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 731147#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 731114#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 731115#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 747334#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 747333#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 747332#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 747331#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 747327#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 747325#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 747319#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 747317#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 730373#L2164-3 assume !(1 == ~doorState~0); 730370#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 730367#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 730365#L1685-2 assume !(0 == ~currentFloorID~0); 730363#L1691-2 assume ~currentFloorID~0 > 0; 730364#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 730369#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 730366#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 730361#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 730362#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 730576#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 732231#L1892-3 assume !(1 == ~currentHeading~0); 732221#L1902-9 assume !(0 == ~currentFloorID~0); 732208#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 732202#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 732197#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 732195#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 732192#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 732188#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 737763#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 737764#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 737750#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 737749#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 737748#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 737747#L890-2 assume !false; 737746#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 737745#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 737744#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 737743#L898 assume 1 != cleanup_~tmp___0~1#1; 737742#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 737741#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 737740#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 737739#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 737738#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 737737#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 737733#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 731373#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 731374#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 736774#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 736772#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 736769#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 736767#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 736765#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 736763#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 736761#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 736759#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 736756#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 736754#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 736752#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 736751#L2164-3 assume !(1 == ~doorState~0); 736747#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 736744#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 736745#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 738970#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 738968#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 738964#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 738965#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 738944#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 736974#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 732252#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 732250#L2181-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 732247#L1947-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 732243#getReverseHeading_returnLabel#4 timeShift_#t~ret89#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 732234#L1892-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 732225#isTopFloor_returnLabel#9 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 732210#L1896-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 732204#L1902-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 732198#L1908-9 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 732196#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 732194#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 732190#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 732184#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 731993#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 731998#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 731996#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 731989#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 731900#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 731796#L890-2 [2024-11-09 15:55:28,491 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:28,491 INFO L85 PathProgramCache]: Analyzing trace with hash 1979415046, now seen corresponding path program 1 times [2024-11-09 15:55:28,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:28,491 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [617368986] [2024-11-09 15:55:28,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:28,491 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:28,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:28,916 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:28,917 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:28,917 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [617368986] [2024-11-09 15:55:28,917 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [617368986] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:28,917 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:28,917 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:28,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1204611224] [2024-11-09 15:55:28,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:28,918 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:28,918 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:28,918 INFO L85 PathProgramCache]: Analyzing trace with hash 233074384, now seen corresponding path program 3 times [2024-11-09 15:55:28,918 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:28,918 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1810333230] [2024-11-09 15:55:28,918 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:28,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:28,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:28,982 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-09 15:55:28,982 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:28,982 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1810333230] [2024-11-09 15:55:28,982 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1810333230] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:28,982 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:28,982 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:28,982 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1780270046] [2024-11-09 15:55:28,983 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:28,983 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:28,983 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:28,983 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-09 15:55:28,983 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2024-11-09 15:55:28,983 INFO L87 Difference]: Start difference. First operand 31430 states and 57263 transitions. cyclomatic complexity: 25835 Second operand has 7 states, 7 states have (on average 9.428571428571429) internal successors, (66), 7 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:29,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:29,489 INFO L93 Difference]: Finished difference Result 32862 states and 59551 transitions. [2024-11-09 15:55:29,489 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 32862 states and 59551 transitions. [2024-11-09 15:55:29,614 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 29630 [2024-11-09 15:55:29,697 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 32862 states to 32862 states and 59551 transitions. [2024-11-09 15:55:29,697 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 32862 [2024-11-09 15:55:29,723 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 32862 [2024-11-09 15:55:29,723 INFO L73 IsDeterministic]: Start isDeterministic. Operand 32862 states and 59551 transitions. [2024-11-09 15:55:29,744 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:29,744 INFO L218 hiAutomatonCegarLoop]: Abstraction has 32862 states and 59551 transitions. [2024-11-09 15:55:29,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32862 states and 59551 transitions. [2024-11-09 15:55:30,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32862 to 32768. [2024-11-09 15:55:30,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32768 states, 32768 states have (on average 1.814483642578125) internal successors, (59457), 32767 states have internal predecessors, (59457), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:30,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32768 states to 32768 states and 59457 transitions. [2024-11-09 15:55:30,215 INFO L240 hiAutomatonCegarLoop]: Abstraction has 32768 states and 59457 transitions. [2024-11-09 15:55:30,215 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-09 15:55:30,215 INFO L425 stractBuchiCegarLoop]: Abstraction has 32768 states and 59457 transitions. [2024-11-09 15:55:30,215 INFO L332 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2024-11-09 15:55:30,215 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 32768 states and 59457 transitions. [2024-11-09 15:55:30,292 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 29536 [2024-11-09 15:55:30,293 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:30,293 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:30,300 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:30,300 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:30,300 INFO L745 eck$LassoCheckResult]: Stem: 792284#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 792285#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 793291#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 792819#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 792820#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 792817#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 792818#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 792145#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 792146#L104 assume !(0 == getOrigin_~person#1); 793604#L108 assume !(1 == getOrigin_~person#1); 792317#L112 assume !(2 == getOrigin_~person#1); 792318#L116 assume !(3 == getOrigin_~person#1); 793760#L120 assume !(4 == getOrigin_~person#1); 793512#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 792307#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 792308#L3009 assume !(0 == initPersonOnFloor_~floor#1); 793195#L3036 assume 1 == initPersonOnFloor_~floor#1; 793196#L3037 assume !(0 == initPersonOnFloor_~person#1); 793861#L3040 assume !(1 == initPersonOnFloor_~person#1); 792516#L3043 assume !(2 == initPersonOnFloor_~person#1); 792517#L3046 assume !(3 == initPersonOnFloor_~person#1); 794081#L3049 assume !(4 == initPersonOnFloor_~person#1); 792357#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 792358#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 793673#L2801 assume !(0 == callOnFloor_~floorID#1); 794016#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 792788#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 794237#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 794236#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 794235#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 794234#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 794233#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 794128#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 793401#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 792327#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 792329#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 794231#L2073 assume !(0 != timeShift_~tmp___9~2#1); 792600#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 792601#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 791963#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 791964#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 793142#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 793143#L1526 assume !(~currentFloorID~0 < 0); 794096#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 794097#$Ultimate##1986 assume ~currentFloorID~0 < 1; 793127#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 793128#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 794014#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 792936#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 792937#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 794244#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 794245#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 792087#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 792088#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 792683#L1896 assume !(0 != continueInDirection_~tmp~16#1); 792684#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 793412#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 793382#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 793445#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 793446#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 798343#$Ultimate##2467 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 795937#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 795942#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 795940#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 795926#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 795923#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 795922#L890-2 [2024-11-09 15:55:30,301 INFO L747 eck$LassoCheckResult]: Loop: 795922#L890-2 assume !false; 795921#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 795914#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 795910#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 795908#L898 assume 1 != cleanup_~tmp___0~1#1; 795907#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795906#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795905#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 795902#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 795898#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795897#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 795581#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795574#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 795305#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 795231#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 795184#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 795185#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795071#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 795062#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795057#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 795054#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 795055#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 795019#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 794986#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 794760#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 794729#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 794529#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 794527#L2164-3 assume !(1 == ~doorState~0); 794524#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 794523#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 794522#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 794520#L1520-2 assume !(0 != stopRequestedInDirection_~tmp~15#1); 794521#L1526-2 assume ~currentFloorID~0 < 0; 794811#L1527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 794823#L2738-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 794813#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret54#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1; 794746#L1531-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 794742#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 795466#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 795464#L1892-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 795462#isTopFloor_returnLabel#7 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 795461#L1896-9 assume !(0 != continueInDirection_~tmp~16#1); 795460#L1902-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 795458#L1908-7 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 795456#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 795455#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 795453#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 795450#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 795432#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 795437#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 795435#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 795424#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 795422#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 795420#L890-2 assume !false; 795418#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 795416#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 795414#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 795412#L898 assume 1 != cleanup_~tmp___0~1#1; 795411#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795410#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795398#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 795395#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 795392#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795390#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 795382#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795372#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 795294#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 795192#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 795193#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 795079#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 795080#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 795221#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 795219#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 795217#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 795215#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 795213#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 795210#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 795208#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 795205#L2164-3 assume !(1 == ~doorState~0); 795202#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 795201#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 795200#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 795198#L1520-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 795197#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 795196#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 795194#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 795186#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 795187#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 802213#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 802208#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 802206#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 802205#L1892-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 802204#isTopFloor_returnLabel#10 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 802203#L1896-15 assume !(0 != continueInDirection_~tmp~16#1); 795158#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 795957#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 795954#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 795953#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 795952#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 795951#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 795949#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 795950#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 795927#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 795925#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 795924#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 795922#L890-2 [2024-11-09 15:55:30,301 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:30,302 INFO L85 PathProgramCache]: Analyzing trace with hash 1536515906, now seen corresponding path program 1 times [2024-11-09 15:55:30,302 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:30,302 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [286123426] [2024-11-09 15:55:30,302 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:30,302 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:30,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:30,384 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:30,384 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:30,384 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [286123426] [2024-11-09 15:55:30,384 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [286123426] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:30,385 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:30,385 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 15:55:30,385 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1123924104] [2024-11-09 15:55:30,385 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:30,385 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:30,385 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:30,385 INFO L85 PathProgramCache]: Analyzing trace with hash 337620839, now seen corresponding path program 1 times [2024-11-09 15:55:30,385 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:30,385 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1580847430] [2024-11-09 15:55:30,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:30,385 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:30,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:30,463 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-11-09 15:55:30,463 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:30,464 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1580847430] [2024-11-09 15:55:30,464 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1580847430] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:30,464 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:30,464 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:30,464 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1627449850] [2024-11-09 15:55:30,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:30,465 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:30,465 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:30,466 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-09 15:55:30,466 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-09 15:55:30,466 INFO L87 Difference]: Start difference. First operand 32768 states and 59457 transitions. cyclomatic complexity: 26691 Second operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:31,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:31,093 INFO L93 Difference]: Finished difference Result 56506 states and 101817 transitions. [2024-11-09 15:55:31,094 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 56506 states and 101817 transitions. [2024-11-09 15:55:31,530 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 53086 [2024-11-09 15:55:31,676 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 56506 states to 56426 states and 101721 transitions. [2024-11-09 15:55:31,676 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 56426 [2024-11-09 15:55:31,722 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 56426 [2024-11-09 15:55:31,722 INFO L73 IsDeterministic]: Start isDeterministic. Operand 56426 states and 101721 transitions. [2024-11-09 15:55:31,756 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:31,757 INFO L218 hiAutomatonCegarLoop]: Abstraction has 56426 states and 101721 transitions. [2024-11-09 15:55:31,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56426 states and 101721 transitions. [2024-11-09 15:55:32,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56426 to 52875. [2024-11-09 15:55:32,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52875 states, 52875 states have (on average 1.8029314420803781) internal successors, (95330), 52874 states have internal predecessors, (95330), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:32,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52875 states to 52875 states and 95330 transitions. [2024-11-09 15:55:32,594 INFO L240 hiAutomatonCegarLoop]: Abstraction has 52875 states and 95330 transitions. [2024-11-09 15:55:32,594 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-09 15:55:32,595 INFO L425 stractBuchiCegarLoop]: Abstraction has 52875 states and 95330 transitions. [2024-11-09 15:55:32,595 INFO L332 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2024-11-09 15:55:32,595 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52875 states and 95330 transitions. [2024-11-09 15:55:32,765 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 49543 [2024-11-09 15:55:32,766 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:32,766 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:32,777 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:32,778 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:32,778 INFO L745 eck$LassoCheckResult]: Stem: 881579#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 881580#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 882594#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 882109#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 882110#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 882111#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 882112#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 881438#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 881439#L104 assume !(0 == getOrigin_~person#1); 882904#L108 assume !(1 == getOrigin_~person#1); 881614#L112 assume !(2 == getOrigin_~person#1); 881615#L116 assume !(3 == getOrigin_~person#1); 883061#L120 assume !(4 == getOrigin_~person#1); 882810#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 881600#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 881601#L3009 assume !(0 == initPersonOnFloor_~floor#1); 882490#L3036 assume 1 == initPersonOnFloor_~floor#1; 882491#L3037 assume !(0 == initPersonOnFloor_~person#1); 883171#L3040 assume !(1 == initPersonOnFloor_~person#1); 881811#L3043 assume !(2 == initPersonOnFloor_~person#1); 881812#L3046 assume !(3 == initPersonOnFloor_~person#1); 883419#L3049 assume !(4 == initPersonOnFloor_~person#1); 881654#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 881655#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 882977#L2801 assume !(0 == callOnFloor_~floorID#1); 883347#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 882082#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 883616#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 883615#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 883614#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 883613#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 883612#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 883469#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 882703#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 881624#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 881626#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 883611#L2073 assume !(0 != timeShift_~tmp___9~2#1); 881894#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 881895#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 883108#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 883014#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 883015#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 883366#L1526 assume !(~currentFloorID~0 < 0); 883367#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 882596#$Ultimate##1986 assume ~currentFloorID~0 < 1; 882597#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 883521#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 883522#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 889345#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 882521#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 881928#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 883620#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 883622#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 882291#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 882292#L1896 assume !(0 != continueInDirection_~tmp~16#1); 881426#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 881427#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 883632#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 883633#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 883628#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 883629#$Ultimate##2467 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 889325#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 889323#areDoorsOpen_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 889320#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 889294#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 889290#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 889286#L890-2 [2024-11-09 15:55:32,779 INFO L747 eck$LassoCheckResult]: Loop: 889286#L890-2 assume !false; 889282#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 889274#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 889270#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 889268#L898 assume 1 != cleanup_~tmp___0~1#1; 885328#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 885329#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 885319#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 885320#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 885312#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 885314#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 885304#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 885305#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 884743#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 884736#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 884730#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 884731#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 884726#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 884722#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 884714#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 884472#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 884437#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 884233#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 884228#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 884226#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 884224#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 884190#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 884185#L2164-3 assume !(1 == ~doorState~0); 884181#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 884179#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 884177#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 884173#L1520-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 884171#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 884169#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 884165#L1947-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 884166#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 884357#L1516-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 884161#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 884355#L1520-3 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 884079#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 884353#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 884352#L1892-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 884351#isTopFloor_returnLabel#10 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 884350#L1896-15 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 884349#L1902-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 884348#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 884346#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 884345#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 884338#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 884335#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 883768#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 883761#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 883762#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 884292#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 884291#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 884290#L890-2 assume !false; 884289#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 884288#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 884287#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 884286#L898 assume 1 != cleanup_~tmp___0~1#1; 884285#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 884284#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 884283#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 884281#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 884279#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 884278#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 884274#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 884273#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 883690#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 883683#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 883678#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 883679#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 883674#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 883670#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 883671#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 883661#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 883662#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 883653#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 883654#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 883644#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 883645#L2164-3 assume !(1 == ~doorState~0); 889096#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 889094#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 889095#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 891898#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 891895#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 891891#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 891892#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 891885#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 889573#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 889568#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 889493#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 888894#L1892-5 assume !(1 == ~currentHeading~0); 889524#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 889464#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 889450#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 889444#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 889437#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 889434#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 889426#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 889423#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 889419#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 889404#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 889295#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 889291#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 889286#L890-2 [2024-11-09 15:55:32,779 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:32,779 INFO L85 PathProgramCache]: Analyzing trace with hash 1046388608, now seen corresponding path program 1 times [2024-11-09 15:55:32,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:32,779 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1793682979] [2024-11-09 15:55:32,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:32,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:32,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:32,817 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:55:32,818 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:32,818 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1793682979] [2024-11-09 15:55:32,818 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1793682979] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:32,818 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:32,818 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:55:32,818 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1881276634] [2024-11-09 15:55:32,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:32,819 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:55:32,819 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:32,819 INFO L85 PathProgramCache]: Analyzing trace with hash -2087000468, now seen corresponding path program 1 times [2024-11-09 15:55:32,819 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:32,819 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1842078653] [2024-11-09 15:55:32,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:32,819 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:32,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:32,897 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-11-09 15:55:32,897 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:32,898 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1842078653] [2024-11-09 15:55:32,898 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1842078653] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:32,898 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:32,898 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:32,898 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [936038569] [2024-11-09 15:55:32,898 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:32,899 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:32,899 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:32,899 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:55:32,899 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:55:32,899 INFO L87 Difference]: Start difference. First operand 52875 states and 95330 transitions. cyclomatic complexity: 42457 Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:33,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:33,254 INFO L93 Difference]: Finished difference Result 104843 states and 189094 transitions. [2024-11-09 15:55:33,254 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 104843 states and 189094 transitions. [2024-11-09 15:55:34,159 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 98918 [2024-11-09 15:55:34,419 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 104843 states to 104843 states and 189094 transitions. [2024-11-09 15:55:34,419 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 104843 [2024-11-09 15:55:34,497 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 104843 [2024-11-09 15:55:34,497 INFO L73 IsDeterministic]: Start isDeterministic. Operand 104843 states and 189094 transitions. [2024-11-09 15:55:34,557 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:34,557 INFO L218 hiAutomatonCegarLoop]: Abstraction has 104843 states and 189094 transitions. [2024-11-09 15:55:34,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104843 states and 189094 transitions. [2024-11-09 15:55:35,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104843 to 104843. [2024-11-09 15:55:35,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104843 states, 104843 states have (on average 1.803592037618153) internal successors, (189094), 104842 states have internal predecessors, (189094), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:35,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104843 states to 104843 states and 189094 transitions. [2024-11-09 15:55:35,744 INFO L240 hiAutomatonCegarLoop]: Abstraction has 104843 states and 189094 transitions. [2024-11-09 15:55:35,745 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:55:35,745 INFO L425 stractBuchiCegarLoop]: Abstraction has 104843 states and 189094 transitions. [2024-11-09 15:55:35,745 INFO L332 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2024-11-09 15:55:35,745 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 104843 states and 189094 transitions. [2024-11-09 15:55:36,036 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 98918 [2024-11-09 15:55:36,037 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:36,037 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:36,059 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:36,059 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:36,060 INFO L745 eck$LassoCheckResult]: Stem: 1039305#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1039306#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 1040317#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1039842#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 1039843#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 1039840#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 1039841#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1039166#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1039167#L104 assume !(0 == getOrigin_~person#1); 1040628#L108 assume !(1 == getOrigin_~person#1); 1039340#L112 assume !(2 == getOrigin_~person#1); 1039341#L116 assume !(3 == getOrigin_~person#1); 1040778#L120 assume !(4 == getOrigin_~person#1); 1040535#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1039326#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1039327#L3009 assume !(0 == initPersonOnFloor_~floor#1); 1040222#L3036 assume 1 == initPersonOnFloor_~floor#1; 1040223#L3037 assume !(0 == initPersonOnFloor_~person#1); 1040874#L3040 assume !(1 == initPersonOnFloor_~person#1); 1039539#L3043 assume !(2 == initPersonOnFloor_~person#1); 1039540#L3046 assume !(3 == initPersonOnFloor_~person#1); 1041080#L3049 assume !(4 == initPersonOnFloor_~person#1); 1039380#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1039381#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1040695#L2801 assume !(0 == callOnFloor_~floorID#1); 1041023#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1039813#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1041224#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1041223#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1041222#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1041221#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1041220#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1041120#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1040426#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1039350#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1039352#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1041219#L2073 assume !(0 != timeShift_~tmp___9~2#1); 1039625#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 1039626#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1086405#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1086404#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1086403#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1086402#L1526 assume !(~currentFloorID~0 < 0); 1086401#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 1086400#$Ultimate##1986 assume ~currentFloorID~0 < 1; 1086399#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1086398#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 1086396#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1086393#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 1086388#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1086375#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1086373#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1086372#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1086371#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1086370#L1896 assume !(0 != continueInDirection_~tmp~16#1); 1086369#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1086301#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1086296#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1086294#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1086292#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1086285#$Ultimate##2467 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1039912#L270 assume !(0 != ~floorButtons_spc2_1~0); 1039613#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1039614#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1040431#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1086214#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1086064#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1086063#L890-2 [2024-11-09 15:55:36,060 INFO L747 eck$LassoCheckResult]: Loop: 1086063#L890-2 assume !false; 1086061#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1086059#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1086055#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1086043#L898 assume 1 != cleanup_~tmp___0~1#1; 1085845#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1085839#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1085815#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1085801#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1085795#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1085797#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1085788#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1085789#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1085699#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1085692#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1085671#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1085672#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1085552#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 1085449#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1085444#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1085442#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1085440#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1085383#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1085368#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1085364#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1085359#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1085355#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1085208#L2164-3 assume !(1 == ~doorState~0); 1085205#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1085203#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1085202#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1085199#L1520-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1085197#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1085196#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1085194#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1085193#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1085191#L1516-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1085163#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1085139#L1520-3 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1085136#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1085124#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1085123#L1892-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1085118#isTopFloor_returnLabel#10 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1085112#L1896-15 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1085107#L1902-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1085103#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1085101#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1085100#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1085098#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1085080#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1085078#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1041913#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1041915#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1041906#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1041905#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1041904#L890-2 assume !false; 1041903#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1041902#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1041901#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1041900#L898 assume 1 != cleanup_~tmp___0~1#1; 1041899#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1041898#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1041897#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1041895#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1041893#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1041892#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1041884#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1041874#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1041868#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1041860#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1041859#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1041858#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1041856#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1041854#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1041852#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1041850#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1041848#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1041845#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1041842#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1041839#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1041835#L2164-3 assume !(1 == ~doorState~0); 1041833#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1095336#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 1040099#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1040100#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1096152#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1096150#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1096146#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1095316#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 1095301#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1095297#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1086232#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1086230#L1892-5 assume !(1 == ~currentHeading~0); 1086091#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1086089#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1086087#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1086083#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1086081#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1086079#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1086076#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1086073#L270-1 assume !(0 != ~floorButtons_spc2_1~0); 1059010#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1086071#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1086070#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1042428#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1086065#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1086063#L890-2 [2024-11-09 15:55:36,061 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:36,061 INFO L85 PathProgramCache]: Analyzing trace with hash -1605338435, now seen corresponding path program 1 times [2024-11-09 15:55:36,061 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:36,061 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1776418138] [2024-11-09 15:55:36,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:36,061 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:36,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-09 15:55:36,074 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-09 15:55:36,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-09 15:55:36,112 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-09 15:55:36,113 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:36,113 INFO L85 PathProgramCache]: Analyzing trace with hash 120754175, now seen corresponding path program 1 times [2024-11-09 15:55:36,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:36,113 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1158316521] [2024-11-09 15:55:36,113 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:36,113 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:36,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:36,171 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2024-11-09 15:55:36,172 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:36,172 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1158316521] [2024-11-09 15:55:36,172 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1158316521] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:36,172 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:36,172 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:55:36,172 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1089295013] [2024-11-09 15:55:36,172 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:36,172 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:36,172 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:36,173 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-09 15:55:36,173 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-09 15:55:36,173 INFO L87 Difference]: Start difference. First operand 104843 states and 189094 transitions. cyclomatic complexity: 84253 Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 7 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:37,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:37,746 INFO L93 Difference]: Finished difference Result 209813 states and 376097 transitions. [2024-11-09 15:55:37,746 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 209813 states and 376097 transitions. [2024-11-09 15:55:39,451 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 200458 [2024-11-09 15:55:40,271 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 209813 states to 209813 states and 376097 transitions. [2024-11-09 15:55:40,272 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 209813 [2024-11-09 15:55:40,464 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 209813 [2024-11-09 15:55:40,464 INFO L73 IsDeterministic]: Start isDeterministic. Operand 209813 states and 376097 transitions. [2024-11-09 15:55:40,620 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:40,620 INFO L218 hiAutomatonCegarLoop]: Abstraction has 209813 states and 376097 transitions. [2024-11-09 15:55:40,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209813 states and 376097 transitions. [2024-11-09 15:55:42,711 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209813 to 207399. [2024-11-09 15:55:42,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 207399 states, 207399 states have (on average 1.801758928442278) internal successors, (373683), 207398 states have internal predecessors, (373683), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:43,246 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207399 states to 207399 states and 373683 transitions. [2024-11-09 15:55:43,246 INFO L240 hiAutomatonCegarLoop]: Abstraction has 207399 states and 373683 transitions. [2024-11-09 15:55:43,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-09 15:55:43,250 INFO L425 stractBuchiCegarLoop]: Abstraction has 207399 states and 373683 transitions. [2024-11-09 15:55:43,250 INFO L332 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2024-11-09 15:55:43,250 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 207399 states and 373683 transitions. [2024-11-09 15:55:44,664 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 198140 [2024-11-09 15:55:44,664 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:55:44,664 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:55:44,708 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:44,708 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:55:44,709 INFO L745 eck$LassoCheckResult]: Stem: 1353978#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1353979#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 1355010#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1354515#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 1354516#valid_product_returnLabel#1 main_#t~ret46#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 1354517#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 1354518#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1353838#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1353839#L104 assume !(0 == getOrigin_~person#1); 1355328#L108 assume !(1 == getOrigin_~person#1); 1354012#L112 assume !(2 == getOrigin_~person#1); 1354013#L116 assume !(3 == getOrigin_~person#1); 1355482#L120 assume !(4 == getOrigin_~person#1); 1355235#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1353999#getOrigin_returnLabel#1 bigMacCall_#t~ret39#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1354000#L3009 assume !(0 == initPersonOnFloor_~floor#1); 1354904#L3036 assume 1 == initPersonOnFloor_~floor#1; 1354905#L3037 assume !(0 == initPersonOnFloor_~person#1); 1355602#L3040 assume !(1 == initPersonOnFloor_~person#1); 1354208#L3043 assume !(2 == initPersonOnFloor_~person#1); 1354209#L3046 assume !(3 == initPersonOnFloor_~person#1); 1355831#L3049 assume !(4 == initPersonOnFloor_~person#1); 1354053#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1354054#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1355397#L2801 assume !(0 == callOnFloor_~floorID#1); 1355766#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1355767#L2813-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1418218#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1418217#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1418216#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1418215#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1418210#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1418211#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1418214#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1418212#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1418213#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1418207#L2073 assume !(0 != timeShift_~tmp___9~2#1); 1354294#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 1354295#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1490266#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1490265#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1490264#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1490263#L1526 assume !(~currentFloorID~0 < 0); 1490262#$Ultimate##1980 assume !(~currentFloorID~0 < 0); 1490261#$Ultimate##1986 assume ~currentFloorID~0 < 1; 1490260#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1490259#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 1490257#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1482735#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 1482673#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1482657#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1482650#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1482641#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1482632#isTopFloor_returnLabel#2 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1482622#L1896 assume !(0 != continueInDirection_~tmp~16#1); 1482615#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1482609#L1908-1 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1482606#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1482604#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1482602#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482600#$Ultimate##2467 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1482598#L270 assume !(0 != ~floorButtons_spc2_1~0); 1482597#$Ultimate##2476 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482595#$Ultimate##2485 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482593#$Ultimate##2494 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482592#L314 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1482590#timeShift_returnLabel#1 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1482589#L890-2 [2024-11-09 15:55:44,709 INFO L747 eck$LassoCheckResult]: Loop: 1482589#L890-2 assume !false; 1482588#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1482587#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1482586#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1482585#L898 assume 1 != cleanup_~tmp___0~1#1; 1482584#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1482583#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1482582#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1482580#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1482578#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1482573#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1482572#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1482567#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1482493#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1482485#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1443405#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1443404#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1382262#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 1382259#L2742-26 assume !(1 == isFloorCalling_~floorID#1); 1382252#L2746-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1382250#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1382247#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1382245#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1382242#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1382237#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1382234#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1382232#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1382230#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1382228#L2164-3 assume !(1 == ~doorState~0); 1382221#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1382219#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1382216#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1382213#L1520-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1382211#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1382208#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1382205#L1947-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1382206#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1382366#L1516-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1382200#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1382180#L1520-3 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1382179#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1382176#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1382174#L1892-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1382173#isTopFloor_returnLabel#10 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1382171#L1896-15 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1382162#L1902-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1382161#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1382158#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1382156#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1382151#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1382146#$Ultimate##4917 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1382144#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1382127#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1382129#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1356675#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1382121#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1382120#L890-2 assume !false; 1382119#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1382118#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1382117#isBlocked_returnLabel#1 cleanup_#t~ret40#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1382116#L898 assume 1 != cleanup_~tmp___0~1#1; 1382115#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1382114#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1382113#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1382111#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1382109#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1382108#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1382106#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1382107#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1382094#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1382084#anyStopRequested_returnLabel#1 isIdle_#t~ret52#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1382079#isIdle_returnLabel#1 cleanup_#t~ret41#1 := isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1382078#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1382076#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1382075#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1382074#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1382073#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1382072#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1382070#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1382064#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1382061#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1382062#L2164-3 assume !(1 == ~doorState~0); 1490598#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1490595#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 1490596#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1491182#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1491180#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1491177#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1491175#getReverseHeading_returnLabel#3 timeShift_#t~ret87#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1491173#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 1483020#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1483016#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1505170#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1482638#L1892-5 assume !(1 == ~currentHeading~0); 1482628#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1482619#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1482613#L1908-11 havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1482607#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1482605#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1482603#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482601#$Ultimate##4917 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1482599#L270-1 assume !(0 != ~floorButtons_spc2_1~0); 1375444#$Ultimate##4926 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482596#$Ultimate##4935 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1482594#$Ultimate##4944 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1375441#L314-1 havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1482591#timeShift_returnLabel#2 havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1482589#L890-2 [2024-11-09 15:55:44,710 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:44,710 INFO L85 PathProgramCache]: Analyzing trace with hash -1605338435, now seen corresponding path program 2 times [2024-11-09 15:55:44,710 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:44,710 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1228062509] [2024-11-09 15:55:44,710 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:44,710 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:44,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-09 15:55:44,732 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-09 15:55:44,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-09 15:55:44,757 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-09 15:55:44,758 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:55:44,758 INFO L85 PathProgramCache]: Analyzing trace with hash -136953169, now seen corresponding path program 1 times [2024-11-09 15:55:44,758 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:55:44,758 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [339434072] [2024-11-09 15:55:44,759 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:55:44,759 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:55:44,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:55:44,811 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-09 15:55:44,811 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:55:44,811 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [339434072] [2024-11-09 15:55:44,811 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [339434072] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:55:44,812 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:55:44,812 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 15:55:44,812 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [603728264] [2024-11-09 15:55:44,812 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:55:44,812 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:55:44,812 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:55:44,812 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 15:55:44,813 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 15:55:44,813 INFO L87 Difference]: Start difference. First operand 207399 states and 373683 transitions. cyclomatic complexity: 166286 Second operand has 5 states, 5 states have (on average 17.4) internal successors, (87), 5 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:55:47,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:55:47,195 INFO L93 Difference]: Finished difference Result 306725 states and 556237 transitions. [2024-11-09 15:55:47,196 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 306725 states and 556237 transitions. [2024-11-09 15:55:49,408 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 297466 [2024-11-09 15:55:50,164 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 306725 states to 306725 states and 556237 transitions. [2024-11-09 15:55:50,164 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 306725 [2024-11-09 15:55:50,375 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 306725 [2024-11-09 15:55:50,376 INFO L73 IsDeterministic]: Start isDeterministic. Operand 306725 states and 556237 transitions. [2024-11-09 15:55:50,523 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:55:50,523 INFO L218 hiAutomatonCegarLoop]: Abstraction has 306725 states and 556237 transitions. [2024-11-09 15:55:50,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306725 states and 556237 transitions.